J2EE 1) What is the Java 2 Platform, Enterprise Edition (J2EE)?

Java 2 Platform, Enterprise Edition (J2EE) is a set of coordinated specifications and practices that together enable solutions for developing, deploying, and managing multitier server-centric applications. Building on the Java 2 Platform, Standard Edition (J2SE), J2EE adds the capabilities necessary to provide a complete, stable, secure, and fast Java platform to the enterprise level. It provides value by significantly reducing the cost and complexity of developing and deploying multi-tier solutions, resulting in services that can be rapidly deployed and easily enhanced. 2) What are the main benefits of J2EE? J2EE provides the following: Faster solutions delivery time to market. J2EE uses "containers" to simplify development. J2EE containers provide for the separation of business logic from resource and lifecycle management, which means that developers can focus on writing business logic -- their value add -- rather than writing enterprise infrastructure. For example, the Enterprise JavaBeans (EJB) container (implemented by J2EE technology vendors) handles distributed communication, threading, scaling, transaction management, etc. Similarly, Java Servlets simplify web development by providing infrastructure for component, communication, and session management in a web container that is integrated with a web server. Freedom of choice. J2EE technology is a set of standards that many vendors can implement. The vendors are free to compete on implementations but not on standards or APIs. Sun supplies a comprehensive J2EE Compatibility Test Suite (CTS) to J2EE licensees. The J2EE CTS helps ensure compatibility among the application vendors which helps ensure portability for the applications and components written for J2EE. J2EE brings Write Once, Run Anywhere (WORA) to the server. Simplified connectivity. J2EE technology makes it easier to connect the applications and systems you already have and bring those capabilities to the web, to cell phones, and to devices. J2EE offers Java Message Service for integrating diverse applications in a loosely coupled, asynchronous way. J2EE also offers CORBA support for tightly linking systems through remote method calls. In addition, J2EE 1.3 adds J2EE Connectors for linking to enterprise information systems such as ERP systems, packaged financial applications, and CRM applications.

Page 1 of 210

By offering one platform with faster solution delivery time to market, freedom of choice, and simplified connectivity, J2EE helps IT by reducing TCO and simultaneously avoiding single-source for their enterprise software needs. JDBC 1) What is a database URL? A database URL (or JDBC URL) is a platform independent way of adressing a database. A database/JDBC URL is of the form jdbc:[subprotocol]:[node]/[databaseName] If you are accessing a database called wham on the server yoghurt.jguru.com using the xyz subprotocol, your database URL could be: jdbc:xyz:yoghurt.jguru.com/wham Notice that the ordinary URL is of the form [protocol]://[node]/[path], such as http://www.jguru.com/index.html. The jdbc database URL mimics the ordinary URL, just adding a subprotocol, and - depending on the driver implementation - omitting the double slashes. If the databPage 2 of 210ase resides on the same computer node as the java program, the hostname part and the corresponding double slashes of the jdbc can be skipped: jdbc:odbc:wham All standard database URLs should commence with the string jdbc. 2) How do I create a database connection? The database connection is created in 3 steps: 1. Find a proper database URL (see FAQ on JDBC URL) 2. Load the database driver 3. Ask the Java DriverManager class to open a connection to your database

Page 2 of 210

In java code, the steps are realized in code as follows: 1. Create a properly formatted JDBR URL for your database. (See FAQ on JDBC URL for more information). A JDBC URL has the form jdbc:someSubProtocol://myDatabaseServer/theDatabaseName 2. try { 3. Class.forName("my.database.driver"); 4. } 5. catch(Exception ex) 6. { 7. System.err.println("Could not load database driver: " + ex); 8. } 9. 10. Connection conn = DriverManager.getConnection("a.JDBC.URL", "databaseLogin", "databasePassword"); 11. 3) What is the difference between a Statement and a PreparedStatement? Short answer: 1. The PreparedStatement is a slightly more powerful version of a Statement, and should always be at least as quick and easy to handle as a Statement. 2. The PreparedStatement may be parametrized.

Longer answer: Most relational databases handles a JDBC / SQL query in four steps: 1. Parse the incoming SQL query 2. Compile the SQL query 3. Plan/optimize the data acquisition path 4. Execute the optimized query / acquire and return data

A Statement will always proceed through the four steps above for each SQL query sent to the database. A PreparedStatement pre-executes steps (1) - (3) in the execution process above. Thus, when creating a

Page 3 of 210

PreparedStatement some pre-optimization is performed immediately. The effect is to lessen the load on the database engine at execution time. Code samples Statement example // Assume a database connection, conn. Statement stmnt = null; ResultSet rs = null; try { // Create the Statement stmnt = conn.createStatement(); // Execute the query to obtain the ResultSet rs = stmnt.executeQuery("select * from aTable"); } catch(Exception ex) { System.err.println("Database exception: " + ex); } PreparedStatement example // Assume a database connection, conn. PreparedStatement stmnt = null; ResultSet rs = null; try { // Create the PreparedStatement stmnt = conn.prepareStatement("select * from aTable"); // Execute the query to obtain the ResultSet rs = stmnt.executeQuery(); } catch(Exception ex) { System.err.println("Database exception: " + ex); }

Another advantage of the PreparedStatement class is the ability to create an incomplete query and supply parameter values at execution time. This type of query is well suited for filtering queries which may differ in parameter value only: Page 4 of 210

SELECT firstName FROM employees WHERE salary > 50 SELECT firstName FROM employees WHERE salary > 200 To create a parametrized prepared statement, use the following syntax: // Assume a database connection, conn. PreparedStatement stmnt = null; ResultSet rs = null; try { // Create the PreparedStatement, leaving a '?' // to indicate placement of a parameter. stmnt = conn.prepareStatement( "SELECT firstName FROM employees WHERE salary > ?"); // Complete the statement stmnt.setInt(1, 200); // Execute the query to obtain the ResultSet rs = stmnt.executeQuery(); } catch(Exception ex) { System.err.println("Database exception: " + ex); }

4) What is Metadata and why should I use it? Metadata ('data about data') is information about one of two things: 1. Database information (java.sql.DatabaseMetaData), or 2. Information about a specific ResultSet (java.sql.ResultSetMetaData).

Use DatabaseMetaData to find information about your database, such as its capabilities and structure. Use ResultSetMetaData to find information about the results of an SQL query, such as size and types of columns. See "Database Metadata Example" and "ResultSet Metadata Example"

Page 5 of 210

5) What is the advantage of using a PreparedStatement? For SQL statements that are executed repeatedly, using a PreparedStatement object would almost always be faster than using a Statement object. This is because creating a PreparedStatement object by explicitly giving the SQL statement causes the statement to be precompiled within the database immediately. Thus, when the PreparedStatement is later executed, the DBMS does not have to recompile the SQL statement and prepared an execution plan - it simply runs the statement. Typically, PreparedStatement objects are used for SQL statements that take parameters. However, they can also be used with repeatedly executed SQL statements that do not accept parameters. 6) Can I make a change to the transaction isolation level in the midst of executing the transaction? Although you may want to avoid it, you can change the transaction isolation level in the midst of executing a transaction. However, this will immediately freeze all the changes made upto that point, as a commit() is automatically invoked. 7) At a glance, how does the Java Database Connectivity (JDBC) work? A: The JDBC is used whenever a Java application should communicate with a relational database for which a JDBC driver exists. JDBC is part of the Java platform standard; all visible classes used in the Java/database communication are placed in package java.sql.

JDBC as a mediator between the Java Application and the database Main JDBC classes:

DriverManager. Manages a list of database drivers. Matches connection requests from the java application with the proper database driver using communication subprotocol. The first driver that recognizes a certain subprotocol under jdbc (such as odbc or

Page 6 of 210

dbAnywhere/dbaw) will be used to establish a database Connection. Driver. The database communications link, handling all communication with the database. Normally, once the driver is loaded, the developer need not call it explicitly. Connection. Interface with all methods for contacting a database Statement. Encapsulates an SQL statement which is passed to the database to be parsed, compiled, planned and executed. ResultSet. The answer/result from a statement. A ResultSet is a fancy 2D list which encapsulates all outgoing results from a given SQL query.

JDBC classes normally seen and used by the developer. 8) How do I check what table-like database objects (table, view, temporary table, alias) are present in a particular database? Use java.sql.DatabaseMetaData to probe the database for metadata. Use the getTables method to retrieve information about all database objects (i.e. tables, views, system tables, temporary global or local tables or aliases). The exact usage is described in the code below. NOTE! Certain JDBC drivers throw IllegalCursorStateExceptions when you try to access fields in the ResultSet in the wrong order (i.e. not consecutively). Thus, you should not change the order in which you retrieve the metadata from the ResultSet. public static void main(String[] args) throws Exception { // Load the database driver - in this case, we // use the Jdbc/Odbc bridge driver. Class.forName("sun.jdbc.odbc.JdbcOdbcDriver"); // Open a connection to the database Connection conn = DriverManager.getConnection("[jdbcURL]", Page 7 of 210

"[login]", "[passwd]"); // Get DatabaseMetaData DatabaseMetaData dbmd = conn.getMetaData(); // Get all dbObjects. Replace the last argument in the getTables // method with objectCategories below to obtain only database // tables. (Sending in null retrievs all dbObjects). String[] objectCategories = {"TABLE"}; ResultSet rs = dbmd.getTables(null, null, "%", null); // Printout table data while(rs.next()) { // Get dbObject metadata String dbObjectCatalog = rs.getString(1); String dbObjectSchema = rs.getString(2); String dbObjectName = rs.getString(3); String dbObjectType = rs.getString(4); // Printout System.out.println("" + dbObjectType + ": " + dbObjectName); System.out.println(" Catalog: " + dbObjectCatalog); System.out.println(" Schema: " + dbObjectSchema); } // Close database resources rs.close(); conn.close(); } 9) How do I find all database stored procedures in a database? Use the getProcedures method of interface java.sql.DatabaseMetaData to probe the database for stored procedures. The exact usage is described in the code below. public static void main(String[] args) throws Exception { // Load the database driver - in this case, we // use the Jdbc/Odbc bridge driver. Class.forName("sun.jdbc.odbc.JdbcOdbcDriver"); // Open a connection to the database

Page 8 of 210

Connection conn = DriverManager.getConnection("[jdbcURL]", "[login]", "[passwd]"); // Get DatabaseMetaData DatabaseMetaData dbmd = conn.getMetaData(); // Get all procedures. System.out.println("Procedures are called '" + dbmd.getProcedureTerm() +"' in the DBMS."); ResultSet rs = dbmd.getProcedures(null, null, "%"); // Printout table data while(rs.next()) { // Get procedure metadata String dbProcedureCatalog = rs.getString(1); String dbProcedureSchema = rs.getString(2); String dbProcedureName = rs.getString(3); String dbProcedureRemarks = rs.getString(7); short dbProcedureType = rs.getShort(8); // Make result readable for humans String procReturn = (dbProcedureType == DatabaseMetaData.procedureNoResult ? "No Result" : "Result"); // Printout System.out.println("Procedure: " + dbProcedureName + ", returns: " + procReturn); System.out.println(" [Catalog | Schema]: [" + dbProcedureCatalog + " | " + dbProcedureSchema + "]"); System.out.println(" Comments: " + dbProcedureRemarks); } // Close database resources rs.close(); conn.close(); } 10) What properties should I supply to a database driver in order to connect to a database? Most JDBC drivers should accept 3 properties:

user Page 9 of 210

password hostname However, a JDBC driver may accept an arbitrary number of properties thrown at it. Drivers can be interrogated for their supported properties using the DriverPropertyInfo metadata class. Most drivers will also contain documentation which should specify all properties and their meaning for creating the jdbc database connection. NOTE! The JDBC/ODBC bridge driver does not properly return an array of DriverPropertyInfo objects, but instead throws a NullPointerException. Other database drivers work better in this respect. public static void printPropertyInfo(Driver aDriver, String jdbcURL, Properties daProps) throws Exception { // Get the DriverPropertyInfo of the given driver DriverPropertyInfo[] props = aDriver.getPropertyInfo(jdbcURL, daProps); // If the driver is poorly implemented, // a null object may be returned. if(props == null) return; System.out.println("Resolving properties for: " + aDriver.getClass().getName()); // List all properties. for(int i = 0; i props.length; i++) { // Get the property metadata String propName = props[i].name; String[] propChoices = props[i].choices; boolean req = props[i].required; String propDesc = props[i].description; // Printout System.out.println("" + propName + " (Req: " + req + ")"); if(propChoices == null) { System.out.println(" No choices."); } else {

Page 10 of 210

System.out.print(" Choices: "); for(int j = 0; j propChoices.length; j++) { System.out.print(" " + propChoices[j]); } } System.out.println(" Desc: " + propDesc); } } } 11) I have the choice of manipulating database data using a byte[] or a java.sql.Blob. Which has best performance? java.sql.Blob, since it does not extract any data from the database until you explicitly ask it to. The Java platform 2 type Blob wraps a database locator (which is essentially a pointer to byte). That pointer is a rather large number (between 32 and 256 bits in size) - but the effort to extract it from the database is insignificant next to extracting the full blob content. For insertion into the database, you should use a byte[] since data has not been uploaded to the database yet. Thus, use the Blob class only for extraction. Conclusion: use the java.sql.Blob class for extraction whenever you can. 12) I have the choice of manipulating database data using a String or a java.sql.Clob. Which has best performance? java.sql.Clob, since it does not extract any data from the database until you explicitly ask it to. The Java platform 2 type Clob wraps a database locator (which is essentially a pointer to char). That pointer is a rather large number (between 32 and 256 bits in size) - but the effort to extract it from the database is insignificant next to extracting the full Clob content. For insertion into the database, you should use a String since data need not been downloaded from the database. Thus, use the Clob class only for extraction. Conclusion: Unless you always intend to extract the full textual data stored in the particular table cell, use the java.sql.Clob class for extraction whenever you can.

Page 11 of 210

13) Do I need to commit after an INSERT call in JDBC or does JDBC do it automatically in the DB? If your autoCommit flag (managed by the Connection.setAutoCommit method) is false, you are required to call the commit() method - and vice versa. 14) How can I retrieve only the first n rows, second n rows of a database using a particular WHERE clause ? For example, if a SELECT typically returns a 1000 rows, how do first retrieve the 100 rows, then go back and retrieve the next 100 rows and so on ? Use the Statement.setFetchSize method to indicate the size of each database fetch. Note that this method is only available in the Java 2 platform. For Jdk 1.1.X and Jdk 1.0.X, no standardized way of setting the fetch size exists. Please consult the Db driver manual. 15) What does ResultSet actually contain? Is it the actual data of the result or some links to databases? If it is the actual data then why can't we access it after connection is closed? A ResultSet is an interface. Its implementation depends on the driver and hence ,what it "contains" depends partially on the driver and what the query returns. For example with the Odbc bridge what the underlying implementation layer contains is an ODBC result set. A Type 4 driver executing a stored procedure that returns a cursor - on an oracle database it actually returns a cursor in the database. The oracle cursor can however be processed like a ResultSet would be from the client. Closing a connection closes all interaction with the database and releases any locks that might have been obtained in the process. 16) What are SQL3 data types? The next version of the ANSI/ISO SQL standard defines some new datatypes, commonly referred to as the SQL3 types. The primary SQL3 types are: STRUCT: This is the default mapping for any SQL structured type, and is manifest by the java.sql.Struct type.

Page 12 of 210

REF: Serves as a reference to SQL data within the database. Can be passed as a parameter to a SQL statement. Mapped to the java.sql.Ref type. BLOB: Holds binary large objects. Mapped to the java.sql.Blob type. CLOB: Contains character large objects. Mapped to the java.sql.Clob type. ARRAY: Can store values of a specified type. Mapped to the java.sql.Array type. You can retrieve, store and update SQL3 types using the corresponding getXXX(), setXXX(), and updateXXX() methods defined in ResultSet interface 17) How can I manage special characters (for example: " _ ' % ) when I execute an INSERT query? If I don't filter the quoting marks or the apostrophe, for example, the SQL string will cause an error. The characters "%" and "_" have special meaning in SQL LIKE clauses (to match zero or more characters, or exactly one character, respectively). In order to interpret them literally, they can be preceded with a special escape character in strings, e.g. "\". In order to specify the escape character used to quote these characters, include the following syntax on the end of the query: {escape 'escape-character'} For example, the query SELECT NAME FROM IDENTIFIERS WHERE ID LIKE '\_%' {escape '\'} finds identifier names that begin with an underbar. 18) What is SQLJ and why would I want to use it instead of JDBC? SQL/J is a technology, originally developed by Oracle Corporation, that enables you to embed SQL statements in Java. The purpose of the SQLJ API is to simplify the development requirements of the JDBC API while doing the same thing. Some major databases (Oracle, Sybase) support SQLJ, but others do not. Currently, SQLJ has not been accepted as a

Page 13 of 210

standard, so if you have to learn one of the two technologies, I recommend JDBC. 19) How do I insert an image file (or other raw data) into a database? All raw data types (including binary documents or images) should be read and uploaded to the database as an array of bytes, byte[]. Originating from a binary file, 1. Read all data from the file using a FileInputStream. 2. Create a byte array from the read data. 3. Use method setBytes(int index, byte[] data); of java.sql.PreparedStatement to upload the data. 20) How can I pool my database connections so I don't have to keep reconnecting to the database?

you gets a reference to the pool you gets a free connection from the pool you performs your different tasks you frees the connection to the pool

Since your application retrieves a pooled connection, you don't consume your time to connect / disconnect from your data source. 21) Will a call to PreparedStatement.executeQuery() always close the ResultSet from the previous executeQuery()? A ResultSet is automatically closed by the Statement that generated it when that Statement is closed, re-executed, or is used to retrieve the next result from a sequence of multiple results. 22) How do I upload SQL3 BLOB & CLOB data to a database? Although one may simply extract BLOB & CLOB data from the database using the methods of the java.sql.CLOB and java.sql.BLOB, one must upload the data as normal java datatypes. The example below inserts a BLOB in the form of a byte[] and a CLOB in the form of a String into the database Inserting SQL3 type data [BLOB & CLOB]

Page 14 of 210

private void runInsert() { try { // Log this.log("Inserting values ... "); // Open a new Statement PreparedStatement stmnt = conn.prepareStatement( "insert Lobtest (image, name) values (?, ?)"); // Create a timestamp to measure the insert time Date before = new java.util.Date(); for(int i = 0; i < 500; i++) { // Set parameters stmnt.setBytes(1, blobData); stmnt.setString(2, "i: " + i + ";" + clobData); // Perform insert int rowsAffected = stmnt.executeUpdate(); } // Get another timestamp to complete the time measurement Date after = new java.util.Date(); this.log(" ... Done!"); log("Total run time: " + ( after.getTime() - before.getTime())); // Close database resources stmnt.close(); } catch(SQLException ex) { this.log("Hmm... " + ex); } } 23) What is the difference between client and server database cursors? What you see on the client side is the current row of the cursor which called a Result (ODBC) or ResultSet (JDBC). The cursor is a server-side entity only and remains on the server side. 24) Are prepared statements faster because they are compiled? if so, where and when are they compiled?

Page 15 of 210

Prepared Statements aren't actually compiled, but they are bound by the JDBC driver. Depending on the driver, Prepared Statements can be a lot faster - if you re-use them. Some drivers bind the columns you request in the SQL statement. When you execute Connection.prepareStatement(), all the columns bindings take place, so the binding overhead does not occur each time you run the Prepared Statement. For additional information on Prepared Statement performance and binding see JDBC Performance Tips on IBM's website. 25) Is it possible to connect to multiple databases simultaneously? Can one extract/update data from multiple databases with a single statement? In general, subject, as usual, to the capabilities of the specific driver implementation, one can connect to multiple databases at the same time. At least one driver ( and probably others ) will also handle commits across multiple connections. Obviously one should check the driver documentation rather than assuming these capabilities. As to the second part of the question, one needs special middleware to deal with multiple databases in a single statement or to effectively treat them as one database. DRDA ( Distributed Relational Database Architecture -- I, at least, make it rhyme with "Gerta" ) is probably most commonly used to accomplish this. Oracle has a product called Oracle Transparent Gateway for IBM DRDA and IBM has a product called DataJoiner that make multiple databases appear as one to your application. No doubt there are other products available. XOpen also has papers available regarding DRDA. 26) Why do I get an UnsupportedOperationException? JDBC 2.0, introduced with the 1.2 version of Java, added several capabilities to JDBC. Instead of completely invalidating all the older JDBC 1.x drivers, when you try to perform a 2.0 task with a 1.x driver, an UnsupportedOperationException will be thrown. You need to update your driver if you wish to use the new capabilities. 27) What advantage is there to using prepared statements if I am using connection pooling or closing the connection frequently to avoid resource/connection/cursor limitations? The ability to choose the 'best' efficiency ( or evaluate tradeoffs, if you prefer, ) is, at times, the most important piece of a mature developer's

Page 16 of 210

skillset. This is YAA ( Yet Another Area, ) where that maxim applies. Apparently there is an effort to allow prepared statements to work 'better' with connection pools in JDBC 3.0, but for now, one loses most of the original benefit of prepared statements when the connection is closed. A prepared statement obviously fits best when a statement differing only in variable criteria is executed over and over without closing the statement. However, depending on the DB engine, the SQL may be cached and reused even for a different prepared statement and most of the work is done by the DB engine rather than the driver. In addition, prepared statements deal with data conversions that can be error prone in straight ahead, built on the fly SQL; handling quotes and dates in a manner transparent to the developer, for example. 28) What is JDBC, anyhow? JDBC is Java's means of dynamically accessing tabular data, and primarily data in relational databases, in a generic manner, normally using standard SQL statements. 29) Can I reuse a Statement or must I create a new one for each query? When using a JDBC compliant driver, you can use the same Statement for any number of queries. However, some older drivers did not always "respect the spec." Also note that a Statement SHOULD automatically close the current ResultSet before executing a new query, so be sure you are done with it before re-querying using the same Statement. 30) What is a three-tier architecture? A three-tier architecture is any system which enforces a general separation between the following three parts: 1. Client Tier or user interface 2. Middle Tier or business logic 3. Data Storage Tier Applied to web applications and distributed programming, the three logical tiers usually correspond to the physical separation between three types of devices or hosts: 1. Browser or GUI Application

Page 17 of 210

2. Web Server or Application Server 3. Database Server (often an RDBMS or Relational Database) However, inside of the application server, there is a further division of program code into three logical tiers. This is kind of fractal: the part (app server object design) resembles the whole (physical system architecture). In a classic JSP/Servlet system, these objects are usually implemented as: 1. JSPs or Servlets responsible for creating HTML or WML user interface pages 2. Servlets or JavaBeans responsible for business logic 3. Servlets, JavaBeans, or Java classes responsible for data access. These objects usually use JDBC to query the database. In an EJB system, the three logical tiers are usually implemented somewhat differently: 1. JSPs, Servlets, or Java client applications responsible for user interface 2. Session Beans or Entity Beans whose methods implement business logic and business rules Entity Beans whose fields represent data; these fields are "persisted" (stored and retrieved) either by the EJB server (for container-managed persistence) or by the Entity Beans themselves (for bean-managed persistence) 31) What separates one tier from another in the context of n-tiered architecture? It depends on the application. In a web application, for example, where tier 1 is a web-server, it may communicate with a tier 2 Application Server using RMI over IIOP, and subsequently tier 2 may communicate with tier 3 (data storage) using JDBC, etc. Each of these tiers may be on separate physical machines or they may share the same box. The important thing is the functionality at each tier.

Tier 1 - Presentation - should be concerned mainly with display of user interfaces and/or data to the client browser or client system. Tier 2 - Application - should be concerned with business logic

Page 18 of 210

Tier 3+ - Storage/Enterprise Systems - should be focused on data persistence and/or communication with other Enterprise Systems. 32) What areas should I focus on for the best performance in a JDBC application?

These are few points to consider:

Use a connection pool mechanism whenever possible. Use prepared statements. These can be beneficial, for example with DB specific escaping, even when used only once. Use stored procedures when they can be created in a standard manner. Do watch out for DB specific SP definitions that can cause migration headaches. Even though the jdbc promotes portability, true portability comes from NOT depending on any database specific data types, functions and so on. Select only required columns rather than using select * from Tablexyz. Always close Statement and ResultSet objects as soon as possible. Write modular classes to handle database interaction specifics. Work with DatabaseMetaData to get information about database functionality. Softcode database specific parameters with, for example, properties files. Always catch AND handle database warnings and exceptions. Be sure to check for additional pending exceptions. Test your code with debug statements to determine the time it takes to execute your query and so on to help in tuning your code. Also use query plan functionality if available. Use proper ( and a single standard if possible ) formats, especially for dates. Use proper data types for specific kind of data. For example, store birthdate as a date type rather than, say, varchar.

33) How can I insert multiple rows into a database in a single transaction? //turn off the implicit commit Connection.setAutoCommit(false); //..your insert/update/delete goes here Connection.Commit(); a new transaction is implicitly started. Page 19 of 210

34) How do I convert a java.sql.Timestamp to a java.util.Date? While Timesteamp extends Date, it stores the fractional part of the time within itself instead of within the Date superclass. If you need the partial seconds, you have to add them back in. Date date = new Date(ts.getTime() + (ts.getNanos() / 1000000 )); 35) What is SQL? SQL is a standardized language used to create, manipulate, examine, and manage relational databases. 36) Is Class.forName(Drivername) the only way to load a driver? Can I instantiate the Driver and use the object of the driver? Yes, you can use the driver directly. Create an instance of the driver and use the connect method from the Driver interface. Note that there may actually be two instances created, due to the expected standard behavior of drivers when the class is loaded. 37) What's new in JDBC 3.0? Probably the new features of most interest are:

Savepoint support Reuse of prepared statements by connection pools Retrieval of auto-generated keys Ability to have multiple open ResultSet objects Ability to make internal updates to the data in Blob and Clob objects Ability to Update columns containing BLOB, CLOB, ARRAY and REF types Both java.sql and javax.sql ( JDBC 2.0 Optional Package ) are expected to be included with J2SE 1.4.

38) Why do I get the message "No Suitable Driver"? Often the answer is given that the correct driver is not loaded. This may be the case, but more typically, the JDBC database URL passed is not

Page 20 of 210

properly constructed. When a Connection request is issued, the DriverManager asks each loaded driver if it understands the URL sent. If no driver responds that it understands the URL, then the "No Suitable Driver" message is returned. 39) When I create multiple Statements on my Connection, only the current Statement appears to be executed. What's the problem? All JDBC objects are required to be threadsafe. Some drivers, unfortunately, implement this requirement by processing Statements serially. This means that additional Statements are not executed until the preceding Statement is completed. 40) Can a single thread open up mutliple connections simultaneously for the same database and for same table? The general answer to this is yes. If that were not true, connection pools, for example, would not be possible. As always, however, this is completely dependent on the JDBC driver. You can find out the theoretical maximum number of active Connections that your driver can obtain via the DatabaseMetaData.getMaxConnections method. 41) Can I ensure that my app has the latest data? Typically an application retrieves multiple rows of data, providing a snapshot at an instant of time. Before a particular row is operated upon, the actual data may have been modified by another program. When it is essential that the most recent data is provided, a JDBC 2.0 driver provides the ResultSet.refreshRow method. 42) What does normalization mean for java.sql.Date and java.sql.Time? These classes are thin wrappers extending java.util.Date, which has both date and time components. java.sql.Date should carry only date information and a normalized instance has the time information set to zeros. java.sql.Time should carry only time information and a normalized instance has the date set to the Java epoch ( January 1, 1970 ) and the milliseconds portion set to zero.

Page 21 of 210

43) What's the best way, in terms of performance, to do multiple insert/update statements, a PreparedStatement or Batch Updates? Because PreparedStatement objects are precompiled, their execution can be faster than that of Statement objects. Consequently, an SQL statement that is executed many times is often created as a PreparedStatement object to increase efficiency. A CallableStatement object provides a way to call stored procedures in a standard manner for all DBMSes. Their execution can be faster than that of PreparedStatement object. Batch updates are used when you want to execute multiple statements together. Actually, there is no conflict here. While it depends on the driver/DBMS engine as to whether or not you will get an actual performance benefit from batch updates, Statement, PreparedStatement, and CallableStatement can all execute the addBatch() method. 44) What is JDO? JDO provides for the transparent persistence of data in a data store agnostic manner, supporting object, hierarchical, as well as relational stores. 45) What is the difference between setMaxRows(int) and SetFetchSize(int)? Can either reduce processing time? setFetchSize(int) defines the number of rows that will be read from the database when the ResultSet needs more rows. The method in the java.sql.Statement interface will set the 'default' value for all the ResultSet derived from that Statement; the method in the java.sql.ResultSet interface will override that value for a specific ResultSet. Since database fetches can be expensive in a networked environment, fetch size has an impact on performance. setMaxRows(int) sets the limit of the maximum nuber of rows in a ResultSet object. If this limit is exceeded, the excess rows are "silently dropped". That's all the API says, so the setMaxRows method may not help performance at all other than to decrease memory usage. A value of 0 (default) means no limit. 46) What is DML?

Page 22 of 210

DML is an abbreviation for Data Manipulation Language. This portion of the SQL standard is concerned with manipulating the data in a database as opposed to the structure of a database. The core verbs for DML are SELECT, INSERT, DELETE, UPDATE, COMMIT and ROLLBACK. 47) What is DDL? DDL is an abbreviation for Data Definition Language. This portion of the SQL standard is concerned with the creation, deletion and modification of database objects like tables, indexes and views. The core verbs for DDL are CREATE, ALTER and DROP. While most DBMS engines allow DDL to be used dynamically ( and available to JDBC ), it is often not supported in transactions. 48) How can I get information about foreign keys used in a table? DatabaseMetaData.getImportedKeys() returns a ResultSet with data about foreign key columns, tables, sequence and update and delete rules. 49) How do I disallow NULL values in a table? Null capability is a column integrity constraint, normally aplied at table creation time. Note that some databases won't allow the constraint to be applied after table creation. Most databases allow a default value for the column as well. The following SQL statement displays the NOT NULL constraint: CREATE TABLE CoffeeTable ( Type VARCHAR(25) NOT NULL, Pounds INTEGER NOT NULL, Price NUMERIC(5, 2) NOT NULL ) 50) What isolation level is used by the DBMS when inserting, updating and selecting rows from a database? The answer depends on both your code and the DBMS. If the program does not explicitly set the isolation level, the DBMS default is used. You can determine the default using DatabaseMetaData.getDefaultTransactionIsolation() and the level for the current Connection with Connection.getTransactionIsolation(). If the default is not appropriate for your transaction, change it with Connection.setTransactionIsolation(int level).

Page 23 of 210

51) What are the standard isolation levels defined by JDBC? The values are defined in the class java.sql.Connection and are:

TRANSACTION_NONE TRANSACTION_READ_COMMITTED TRANSACTION_READ_UNCOMMITTED TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE

52) How can I know when I reach the last record in a table, since JDBC doesn't provide an EOF method? You can use last() method of java.sql.ResultSet, if you make it scrollable. You can also use isLast() as you are reading the ResultSet. One thing to keep in mind, though, is that both methods tell you that you have reached the end of the current ResultSet, not necessarily the end of the table. SQL and RDBMSes make no guarantees about the order of rows, even from sequential SELECTs, unless you specifically use ORDER BY. Even then, that doesn't necessarily tell you the order of data in the table. If you are really looking for something that tells you the last ( in this case, latest ) data, you probably need something in a key ( or sequence, date/time, etc ) that provides that information on an ORDER BY basis. 53) Whan happens when I close a Connection application obtained from a connection Pool? How does a connection pool maintain the Connections that I had closed through the application? It is the magic of polymorphism, and of Java interface vs. implementation types. Two objects can both be "instanceof" the same interface type, even though they are not of the same implementation type. When you call "getConnection()" on a pooled connection cache manager object, you get a "logical" connection, something which implements the java.sql.Connection interface.

Page 24 of 210

But it is not the same implementation type as you would get for your Connection, if you directly called getConnection() from a (non-pooled/noncached) datasource. So the "close()" that you invoke on the "logical" Connection is not the same "close()" method as the one on the actual underlying "physical" connection hidden by the pool cache manager. The close() method of the "logical" connection object, while it satisfies the method signature of close() in the java.sql.Connection interface, does not actually close the underlying physical connection. Servlets 1) Is it the "servlets" directory or the "servlet" directory? For Java Web Server:

on the file system, it's "servlets" c:\JavaWebServer1.1\servlets\DateServlet.class in a URL path, it's "servlet" http://www.stinky.com/servlet/DateServlet

2) How do I support both GET and POST protocol from the same Servlet? The easy way is, just support POST, then have your doGet method call your doPost method: public void doGet(HttpServletRequest req, HttpServletResponse res) throws ServletException, IOException { doPost(req, res); } 3) How do I ensure that my servlet is thread-safe? ] This is actually a very complex issue. A few guidelines: 1. The init() method is guaranteed to be called once per servlet instance, when the servlet is loaded. You don't have to worry about thread safety inside this method, since it is only called by a single

Page 25 of 210

thread, and the web server will wait until that thread exits before sending any more threads into your service() method. 2. Every new client request generates (or allocates) a new thread; that thread calls the service() method of your servlet (which may in turn call doPost(), doGet() and so forth). 3. Under most circumstances, there is only one instance of your servlet, no matter how many client requests are in process. That means that at any given moment, there may be many threads running inside the service() method of your solo instance, all sharing the same instance data and potentially stepping on each other's toes. This means that you should be careful to synchronize access to shared data (instance variables) using the synchronized keyword. (Note that the server will also allocate a new instance if you register the servlet with a new name and, e.g., new init parameters.) 4. Note that you need not (and should not) synchronize on local data or parameters. And especially you shouldn't synchronize the service() method! (Or doPost(), doGet() et al.) 5. A simple solution to synchronizing is to always synchronize on the servlet instance itself using &amp;quot;synchronized (this) { ... } &amp;quot;. However, this can lead to performance bottlenecks; you're usually better off synchronizing on the data objects themselves. 6. If you absolutely can't deal with synchronizing, you can declare that your servlet &amp;quot;implements SingleThreadModel&amp;quot;. This empty interface tells the web server to only send one client request at a time into your servlet. From the JavaDoc: &amp;quot;If the target servlet is flagged with this interface, the servlet programmer is guaranteed that no two threads will execute concurrently the service method of that servlet. This guarantee is ensured by maintaining a pool of servlet instances for each such servlet, and dispatching each service call to a free servlet. In essence, if the servlet implements this interface, the servlet will be thread safe.&amp;quot; Note that this is not an ideal solution, since performance may suffer (depending on the size of the instance pool), plus it's more difficult to share data across instances than within a single instance. See also What's a better approach for enabling thread-safe servlets and JSPs? SingleThreadModel Interface or Synchronization?

Page 26 of 210

7. To share data across successive or concurrent requests, you can use either instance variables or class-static variables, or use Session Tracking. 8. The destroy() method is not necessarily as clean as the init() method. The server calls destroy either after all service calls have been completed, or after a certain number of seconds have passed, whichever comes first. This means that other threads might be running service requests at the same time as your destroy() method is called! So be sure to synchronize, and/or wait for the other requests to quit. Sun's Servlet Tutorial has an example of how to do this with reference counting. 9. destroy() can not throw an exception, so if something bad happens, call log() with a helpful message (like the exception). See the &amp;quot;closing a JDBC connection&amp;quot; example in Sun's Tutorial. 4) What is the difference between URL encoding, URL rewriting, HTML escaping, and entity encoding? URL Encoding is a process of transforming user input to a CGI form so it is fit for travel across the network -- basically, stripping spaces and punctuation and replacing with escape characters. URL Decoding is the reverse process. To perform these operations, call java.net.URLEncoder.encode() and java.net.URLDecoder.decode() (the latter was (finally!) added to JDK 1.2, aka Java 2). Example: changing "We're #1!" into "We%27re+%231%21" URL Rewriting is a technique for saving state information on the user's browser between page hits. It's sort of like cookies, only the information gets stored inside the URL, as an additional parameter. The HttpSession API, which is part of the Servlet API, sometimes uses URL Rewriting when cookies are unavailable. Example: changing <A HREF="nextpage.html"> into <A HREF="nextpage.html;$sessionid$=DSJFSDKFSLDFEEKOE"> (or whatever the actual syntax is; I forget offhand) (Unfortunately, the method in the Servlet API for doing URL rewriting for session management is called encodeURL(). Sigh...) There's also a feature of the Apache web server called URL Rewriting; it is enabled by the mod_rewrite module. It rewrites URLs on their way in to the server, allowing you to do things like automatically add a trailing slash Page 27 of 210

to a directory name, or to map old file names to new file names. This has nothing to do with servlets. For more information, see the Apache FAQ (http://www.apache.org/docs/misc/FAQ.html#rewrite-more-config) . 5) How do I upload a file to my servlet or JSP? On the client side, the client's browser must support form-based upload. Most modern browsers do, but there's no guarantee. For example, <FORM ENCTYPE='multipart/form-data' method='POST' action='/myservlet'> <INPUT TYPE='file' NAME='mptest'> <INPUT TYPE='submit' VALUE='upload'> </FORM> The input type &amp;quot;file&amp;quot; brings up a button for a file select box on the browser together with a text field that takes the file name once selected. The servlet can use the GET method parameters to decide what to do with the upload while the POST body of the request contains the file data to parse. When the user clicks the "Upload" button, the client browser locates the local file and sends it using HTTP POST, encoded using the MIME-type multipart/form-data. When it reaches your servlet, your servlet must process the POST data in order to extract the encoded file. You can learn all about this format in RFC 1867. Unfortunately, there is no method in the Servlet API to do this. Fortunately, there are a number of libraries available that do. Some of these assume that you will be writing the file to disk; others return the data as an InputStream.

Jason Hunter's MultipartRequest (available from http://www.servlets.com/) Apache Jakarta Commons Upload (package org.apache.commons.upload) "makes it easy to add robust, highperformance, file upload capability to your servlets and web applications" CParseRFC1867 (available from http://www.servletcentral.com/). HttpMultiPartParser by Anil Hemrajani, at the isavvix Code Exchange

Page 28 of 210

There is a multipart/form parser availailable from Anders Kristensen (http://www-uk.hpl.hp.com/people/ak/java/, ak@hplb.hpl.hp.com) at http://www-uk.hpl.hp.com/people/ak/java/#utils. JavaMail also has MIME-parsing routines (see the Purple Servlet References). Jun Inamori has written a class called org.apache.tomcat.request.ParseMime which is available in the Tomcat CVS tree. JSPSmart has a free set of JSP for doing file upload and download. UploadBean by JavaZoom claims to handle most of the hassle of uploading for you, including writing to disk or memory. There's an Upload Tag in dotJ

Once you process the form-data stream into the uploaded file, you can then either write it to disk, write it to a database, or process it as an InputStream, depending on your needs. See How can I access or create a file or folder in the current directory from inside a servlet? and other questions in the Servlets:Files Topic for information on writing files from a Servlet. Please note that you can't access a file on the client system directly from a servlet; that would be a huge security hole. You have to ask the user for permission, and currently form-based upload is the only way to do that. 6) How does a servlet communicate with a JSP page? The following code snippet shows how a servlet instantiates a bean and initializes it with FORM data posted by a browser. The bean is then placed into the request, and the call is then forwarded to the JSP page, Bean1.jsp, by means of a request dispatcher for downstream processing. public void doPost (HttpServletRequest request, HttpServletResponse response) { try { govi.FormBean f = new govi.FormBean(); String id = request.getParameter("id"); f.setName(request.getParameter("name")); f.setAddr(request.getParameter("addr")); f.setAge(request.getParameter("age")); //use the id to compute Page 29 of 210

//additional bean properties like info //maybe perform a db query, etc. // . . . f.setPersonalizationInfo(info); request.setAttribute("fBean",f); getServletConfig().getServletContext().getRequestDispatcher ("/jsp/Bean1.jsp").forward(request, response); } catch (Exception ex) { ... } } The JSP page Bean1.jsp can then process fBean, after first extracting it from the default request scope via the useBean action. <jsp:useBean id="fBean" class="govi.FormBean" scope="request"/> <jsp:getProperty name="fBean" property="name" /> <jsp:getProperty name="fBean" property="addr" /> <jsp:getProperty name="fBean" property="age" /> <jsp:getProperty name="fBean" property="personalizationInfo" /> 7) What's a better approach for enabling thread-safe servlets and JSPs? SingleThreadModel Interface or Synchronization? Although the SingleThreadModel technique is easy to use, and works well for low volume sites, it does not scale well. If you anticipate your users to increase in the future, you may be better off implementing explicit synchronization for your shared data. The key however, is to effectively minimize the amount of code that is synchronzied so that you take maximum advantage of multithreading. Also, note that SingleThreadModel is pretty resource intensive from the server's perspective. The most serious issue however is when the number of concurrent requests exhaust the servlet instance pool. In that case, all the unserviced requests are queued until something becomes free - which results in poor performance. Since the usage is non-deterministic, it may not help much even if you did add more memory and increased the size of the instance pool. 8) Can a servlet maintain a JTA UserTransaction object across multiple servlet invocations?

Page 30 of 210

No. A JTA transaction must start and finish within a single invocation (of the service() method). Note that this question does not address servlets that maintain and manipulate JDBC connections, including a connection's transaction handling. 9) How does the performance of JSP pages compare with that of servlets? How does it compare with Perl scripts? The performance of JSP pages is very close to that of servlets. However, users may experience a perceptible delay when a JSP page is accessed for the very first time. This is because the JSP page undergoes a "translation phase" wherein it is converted into a servlet by the JSP engine. Once this servlet is dynamically compiled and loaded into memory, it follows the servlet life cycle for request processing. Here, the jspInit() method is automatically invoked by the JSP engine upon loading the servlet, followed by the _jspService() method, which is responsible for request processing and replying to the client. Do note that the lifetime of this servlet is non-deterministic - it may be removed from memory at any time by the JSP engine for resource-related reasons. When this happens, the JSP engine automatically invokes the jspDestroy() method allowing the servlet to free any previously allocated resources. Subsequent client requests to the JSP page do not result in a repeat of the translation phase as long as the servlet is cached in memory, and are directly handled by the servlet's service() method in a concurrent fashion (i.e. the service() method handles each client request within a seperate thread concurrently.) There have been some recent studies contrasting the performance of servlets with Perl scripts running in a "real-life" environment. The results are favorable to servlets, especially when they are running in a clustered environment. 10) How do I call one servlet from another servlet? [ Short answer: there are several ways to do this, including

use a RequestDispatcher use a URLConnection or HTTPClient send a redirect call getServletContext().getServlet(name) (deprecated, doesn't work in 2.1+)

- Alex ]

Page 31 of 210

It depends on what you mean by "call" and what it is you seek to do and why you seek to do it. If the end result needed is to invoke the methods then the simplest mechanism would be to treat the servlet like any java object , create an instance and call the mehods. If the idea is to call the service method from the service method of another servlet, AKA forwarding the request, you could use the RequestDispatcher object. If, however, you want to gain access to the instance of the servlet that has been loaded into memory by the servlet engine, you have to know the alias of the servlet. (How it is defined depends on the engine.) For example, to invoke a servlet in JSDK a servlet can be named by the property myname.code=com.sameer.servlets.MyServlet The code below shows how this named servlet can be accessed in the service method of another servlet public void service (HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { ... MyServlet ms=(MyServlet) getServletConfig().getServletContext().getServlet("myname"); ... } That said, This whole apporach of accessing servlets in another servlets has been deprecated in the 2.1 version of the servlet API due to the security issues. The cleaner and better apporach is to just avoid accessing other servlets directly and use the RequestDispatcher instead. 11) What are all the different kinds of servers? (Such as Web Servers, Application Servers, etc) The servers involved in handling and processing a user's request break down into a few basic types, each of which may have one or more tasks it solves. This flexibility gives developers a great deal of power over how applications will be created and deployed, but also leads to confusion over what server is able to, or should, perform a specific task.

Page 32 of 210

Starting at the basic level, a user is typically submitting a request to a system through a web browser. (We are conveniently ignoring all other types of clients (RMI, CORBA, COM/DCOM, Custom, etc..) for the time being for purposes of clarity.) The web request must be received by a Web Server (otherwise known as an HTTP Server) of some sort. This web server must handle standard HTTP requests and responses, typically returning HTML to the calling user. Code that executes within the server environment may be CGI driven, Servlets, ASP, or some other server-side programming language, but the end result is that the web server will pass back HTML to the user. The web server may need to execute an application in response to the users request. It may be generating a list of news items, or handling a form submission to a guest book. If the server application is written as a Java Servlet, it will need a place to execute, and this place is typically called a Servlet Engine. Depending on the web server, this engine may be internal, external, or a completely different product. This engine is continually running, unlike a traditional CGI environment where a CGI script is started upon each request to the server. This persistance gives a servlet connection and thread pooling, as well as an easy way to maintain state between each HTTP request. JSP pages are usually tied in with the servlet engine, and would execute within the same space/application as the servlets. There are many products that handle the web serving and the servlet engine in different manners. Netscape/iPlanet Enterprise Server builds the servlet engine directly into the web server and runs within the same process space. Apache requires that a servlet engine run in an external process, and will communicate to the engine via TCP/IP sockets. Other servers, such as MS IIS don't officially support servlets, and require addon products to add that capability. When you move on to Enterprise JavaBeans (and other J2EE components like JMS and CORBA) you move into the application server space. An Application Server is any server that supplies additional functionality related to enterprise computing -- for instance, load balancing, database access classes, transaction processing, messaging, and so on. EJB Application Servers provide an EJB container, which is the environment that beans will execute in, and this container will manage transactions, thread pools, and other issues as necessary. These application servers are usually stand-alone products, and developers would tie their servlets/JSP pages to the EJB components via remote object access APIs. Depending on the application server, programmers

Page 33 of 210

may use CORBA or RMI to talk to their beans, but the baseline standard is to use JNDI to locate and create EJB references as necessary. Now, one thing that confuses the issue is that many application server providers include some or all of these components in their product. If you look at WebLogic (http://www.beasys.com/) you will find that WebLogic contains a web server, servlet engine, JSP processor, JMS facility, as well as an EJB container. Theoretically a product like this could be used to handle all aspects of site development. In practice, you would most likely use this type of product to manage/serve EJB instances, while dedicated web servers handle the specific HTTP requests. 12) Should I override the service() method? No. It provides a fair bit of housekeeping that you'd just have to do yourself. If you need to do something regardless of whether the request is e.g., a POST or a GET, create a helper method and call that at the beginning of e.g., doPost() and doGet(). 13) How can my application get to know when a HttpSession is removed (when it time-outs)? Define a class, say SessionTimeoutNotifier, that implements javax.servlet.http.HttpSessionBindingListener. Create a SessionTimeoutNotifier object and add it to the user session. When the session is removed, SessionTimeoutNotifier.valueUnbound() will be called by the servlet engine. You can implement valueUnbound() to do whatever you want. 14) Why use JSP when we can do the same thing with servlets? [Original question: Why should I use JSP when there is already servlet technology available for serving dynamic content?] While JSP may be great for serving up dynamic Web content and separating content from presentation, some may still wonder why servlets should be cast aside for JSP. The utility of servlets is not in question. They are excellent for server-side processing, and, with their significant installed base, are here to stay. In fact, architecturally speaking, you can view JSP as a high-level abstraction of servlets that is implemented as an extension of the Servlet 2.1 API. Still, you shouldn't use servlets indiscriminately; they may not be appropriate for everyone. For instance, while page designers can easily write a JSP page using conventional HTML or XML

Page 34 of 210

tools, servlets are more suited for back-end developers because they are often written using an IDE -- a process that generally requires a higher level of programming expertise. When deploying servlets, even developers have to be careful and ensure that there is no tight coupling between presentation and content. You can usually do this by adding a third-party HTML wrapper package like htmlKona to the mix. But even this approach, though providing some flexibility with simple screen changes, still does not shield you from a change in the presentation format itself. For example, if your presentation changed from HTML to DHTML, you would still need to ensure that wrapper packages were compliant with the new format. In a worst-case scenario, if a wrapper package is not available, you may end up hardcoding the presentation within the dynamic content. So, what is the solution? One approach would be to use both JSP and servlet technologies for building application systems. 15) How do I send information and data back and forth between applet and servlet using the HTTP protocol? Use the standard java.net.URL class, or "roll your own" using java.net.Socket. See the HTTP spec at W3C for more detail. Note: The servlet cannot initiate this connection! If the servlet needs to asynchronously send a message to the applet, then you must open up a persistent socket using java.net.Socket (on the applet side), and java.net.ServerSocket and Threads (on the server side). 16) Can I get the path of the current servlet where it lives on the file system (not its URL)? Try using: request.getRealPath(request.getServletPath()) An example may be: out.println(request.getRealPath(request.getServletPath())); 17) How can I daisy chain servlets together such that the output of one servlet serves as the input to the next?

Page 35 of 210

There are two common methods for chaining the output of one servlet to another servlet : the first method is the aliasing which describes a series of servlets to be executed the second one is to define a new MIME-Type and associate a servlet as handlers As I don't really use the second one, I'll focus on the aliasing. To chain servlets together, you have to specify a sequential list of servlets and associate it to an alias. When a request is made to this alias, the first servlet in the list is invoked, processed its task and sent the ouptut to the next servlet in the list as the request object. The output can be sent again to another servlets. To accomplish this method, you need to configure your servlet engine (JRun, JavaWeb server, JServ ...). For example to configure JRun for servlet chaining, you select the JSE service (JRun servlet engine) to access to the JSE Service Config panel. You have just to define a new mapping rule where you define your chaining servlet. Let say /servlets/chainServlet for the virtual path and a comma separated list of servlets as srvA,srvB. So when you invoke a request like http://localhost/servlets/chainServlet, internally the servlet srvA will be invoked first and its results will be piped into the servlet srvB. The srvA servlet code should look like : public class srvA extends HttpServlet { ... public void doGet (...) { PrintWriter out =res.getWriter(); rest.setContentType("text/html"); ... out.println("Hello Chaining servlet"); } } All the servlet srvB has to do is to open an input stream to the request object and read the data into a BufferedReader object as for example : BufferedReader b = new BufferedReader( new InputStreamReader(req.getInputStream() ) ); String data = b.readLine(); b.close();

Page 36 of 210

After that you can format your output with the data. It should work straigthforward with Java Web Server or Jserv too. Just look at in their documentation to define an alias name. Hope that it'll help. 18) Why there are no constructors in servlets? A servlet is just like an applet in the respect that it has an init() method that acts as a constrcutor. Since the servlet environment takes care of instantiating the servlet, an explicit constructor is not needed. Any initialization code you need to run should be placed in the init() method since it gets called when the servlet is first loaded by the servlet container. 19) How to handle multiple concurrent database requests/updates when using JDBC with servlets? All the dbms provide the facility of locks whenever the data is being modified. There can be two scenarios: 1. Multiple database updates on different rows, if you are using servlets the servlets will open multiple connections for different users. In this case there is no need to do additional programming. 2. If database updates are on the same row then the rows are locked automatically by the dbms, hence we have to send requests to the dbms repeatatively until the lock is released by dbms. This issue is dealt with in the JDBC documentation; look up "Transactions" and "auto-commit". It can get pretty confusing. 20) What is the difference between GenericServlet and HttpServlet? GenericServlet is for servlets that might not use HTTP, like for instance FTP servlets. Of course, it turns out that there's no such thing as FTP servlets, but they were trying to plan for future growth when they designed the spec. Maybe some day there will be another subclass, but for now, always use HttpServlet. 21) How do you share session objects between servlets and JSP? Sharing sessions between a servlet and a JSP page is straight forward. JSP makes it a little easy by creating a session object and making it availabe already. In a servlet you would have to do it yourself. This is how:

Page 37 of 210

//create a session if one is not created already now HttpSession session = request.getSession(true); //assign the session variable to a value. session.putValue("variable","value"); in the jsp page this is how you get the session value: <% session.getValue("varible"); %> 22) What is a servlet? A servlet is a way of extending your web server with a Java program to perform tasks previously dealt with by CGI scripts or proprietary server extension frameworks. 23) Is there any method to unload a servlet from Web Server memory without restarting the server? There is no standard method/mechanism to unload a servlet from memory. Some servers, like JWS, provide the means to load and unload servlets from their administration module. Others, like Tomcat, require you to just replace the WAR file. 24) What distinguishes a JavaBean from a Servlet? JavaBeans are a set of rules to follow to create reusable software components, or beans. This contains properties and events. At the end you have a component which could be examined by a program (like an IDE) to allow the user of your JavaBean component to configure it and to run in its Java programs. Servlets are Java classes running in a Servlet engine implementing a particular interface: Servlet, forcing you to implement some methods (service()). The servlet is an extension of your web server where this servlet is running on and only lets you know when a user requests a GET or POST calls from a web page to your servlet. So, both have nothing in common except Java. 25) How much data we can store in a session object?

Page 38 of 210

Any amount of data can be stored there because the session is kept on the server side. The only limitation is sessionId length, which shouldn't exceed ~4000 bytes - this limitation is implied by HTTP header length limitation to 4Kb since sessionId may be stored in the cookie or encoded in URL (using "URL rewriting") and the cookie specification says the size of cookie as well as HTTP request (e.g. GET /document.html\n) cannot be longer then 4kb. 26) What is the difference between the doGet and doPost methods? doGet is called in response to an HTTP GET request. This happens when users click on a link, or enter a URL into the browser's address bar. It also happens with some HTML FORMs (those with METHOD="GET" specified in the FORM tag). doPost is called in response to an HTTP POST request. This happens with some HTML FORMs (those with METHOD="POST" specified in the FORM tag). Both methods are called by the default (superclass) implementation of service in the HttpServlet base class. You should override one or both to perform your servlet's actions. You probably shouldn't override service().

27) What is the difference between encodeRedirectUrl and encodeURL? encodeURL and encodeRedirectURL are methods of the HttpResponse object. Both rewrite a raw URL to include session data if necessary. (If cookies are on, both are no-ops.) encodeURL is for normal links inside your HTML pages. encodeRedirectURL is for a link you're passing to response.sendRedirect(). It has slightly different syntax requirements too gory to get into here. 28) Can I use System.exit() in servlets? Gack! No no no no no...

Page 39 of 210

At best, you'll get a security exception. At worst, you'll make the servlet engine, or maybe the entire web server, quit. You don't really want to do that, huh? :-) 29) I am opening a single JDBC connection in my init() method. Do I need to synchronize on the Connection or the Statement object? You shouldn't have to. If your JDBC driver supports multiple connections, then the various createStatement methods will give you a thread-safe, reentrant, independent Statement that should work OK, even if other requests/threads are also accessing other Statements on the same Connection. Of course, crossing your fingers never hurts... Many early JDBC drivers were not re-entrant. The modern versions of JDBC drivers should work OK, but there are never any guarantees. Using connection pooling will avoid the whole issue, plus will lead to improved performance. See this FAQ for more information. 30) How can I determine the name and version number of the servlet or JSP engine that I am using? From within a servlet, you can invoke the ServletContext.getServerInfo() method as follows: String thisServer= getServletConfig().getServletContext().getServerInfo(); If you are using JSP, you can use this expression: <%= application.getServerInfo() %> 31) How can I get the absolute URL of a servlet/JSP page at runtime ? You can get all the necessary information to determine the URL from the request object. To reconstruct the absolute URL from the scheme, server name, port, URI and query string you can use the URL class from java.net. The following code fragment will determine your page's absolute URL: String file = request.getRequestURI(); if (request.getQueryString() != null) { file += '?' + request.getQueryString(); }

Page 40 of 210

URL reconstructedURL = new URL(request.getScheme(), request.getServerName(), request.getServerPort(), file); out.println(URL.toString()); 32) Why do GenericServlet and HttpServlet implement the Serializable interface? GenericServlet and HttpServlet implement the Serializable interface so that servlet engines can "hybernate" the servlet state when the servlet is not in use and reinstance it when needed or to duplicate servlet instances for better load balancing. I don't know if or how current servlet engines do this, and it could have serious implications, like breaking references to objects gotten in the init() method without the programmer knowing it. Programmers should be aware of this pitfall and implement servlets which are stateless as possible, delegating data store to Session objects or to the ServletContext. In general stateless servlets are better because they scale much better and are cleaner code. 33) How does one choose between overriding the doGet(), doPost(), and service() methods? The differences between the doGet() and doPost() methods are that they are called in the HttpServlet that your servlet extends by its service() method when it recieves a GET or a POST request from a HTTP protocol request. A GET request is a request to get a resource from the server. This is the case of a browser requesting a web page. It is also possible to specify parameters in the request, but the length of the parameters on the whole is limited. This is the case of a form in a web page declared this way in html: <form method="GET"> or <form>. A POST request is a request to post (to send) form data to a resource on the server. This is the case of of a form in a web page declared this way in html: <form method="POST">. In this case the size of the parameters can be much greater. The GenericServlet has a service() method that gets called when a client request is made. This means that it gets called by both incoming requests and the HTTP requests are given to the servlet as they are (you must do the parsing yourself).

Page 41 of 210

The HttpServlet instead has doGet() and doPost() methods that get called when a client request is GET or POST. This means that the parsing of the request is done by the servlet: you have the appropriate method called and have convenience methods to read the request parameters. NOTE: the doGet() and doPost() methods (as well as other HttpServlet methods) are called by the service() method. Concluding, if you must respond to GET or POST requests made by a HTTP protocol client (usually a browser) don't hesitate to extend HttpServlet and use its convenience methods. If you must respond to requests made by a client that is not using the HTTP protocol, you must use service(). 34) How do servlets differ from RMI? What are the advantages and disadvantages of each technology? Servlets extend the server-side functionality of a website. Servlets communicate with other application(s) on that server (or any other server) and perform tasks above and beyond the "normal" static HTML document. A servlet can receive a request to get some information through EJB from one or more databases, then convert this data into a static HTML/WML page for the client to see, for example. Even if the servlet talks to many other applications all over the world to get this information, it still looks like it happened at that website. RMI (Remote Method Invocation) is just that - a way to invoke methods on remote machines. It is way for an application to talk to another remote machine and execute different methods, all the while appearing as if the action was being performed on the local machine. Servlets (or JSP) are mainly used for any web-related activity such as online banking, online grocery stores, stock trading, etc. With servlets, you need only to know the web address and the pages displayed to you take care of calling the different servlets (or actions within a servlet) for you. Using RMI, you must bind the RMI server to an IP and port, and the client who wishes to talk to the remote server must know this IP and port, unless of course you used some kind of in-between lookup utility, which you could do with (of all things) servlets. 35) How can we use a servlet as a proxy for communications between two applets?

Page 42 of 210

One way to accomplish this is to have the applets communicate via TCP/IP sockets to the servlet. The servlet would then use a custom protocol to receive and push information between applets. However, this solution does have firewall problems if the system is to be used over and Internet verses an Intranet. 36) How can I design my servlet/JSP so that query results get displayed on several pages, like the results of a search engine? Each page should display, say, 10 records each and when the next link is clicked, I should see the next/previous 10 records and so on. Use a Java Bean to store the entire result of the search that you have found. The servlet will then set a pointer to the first line to be displayed in the page and the number of lines to display, and force a display of the page. The Action in the form would point back to the servlet in the JSP page which would determine whether a next or previous button has been pressed and reset the pointer to previous pointer + number of lines and redisplay the page. The JSP page would have a scriplet to display data from the Java Bean from the start pointer set to the maximum number of lines with buttons to allow previous or next pages to be selected. These buttons would be displayed based on the page number (i.e. if first then don't display previous button). 37) How do I deal with multi-valued parameters in a servlet? Instead of using getParameter() with the ServletRequest, as you would with single-valued parameters, use the getParameterValues() method. This returns a String array (or null) containing all the values of the parameter requested. 38) How can I pass data retrieved from a database by a servlet to a JSP page? One of the better approaches for passing data retrieved from a servlet to a JSP is to use the Model 2 architecture as shown below:

Basically, you need to first design a bean which can act as a wrapper for storing the resultset returned by the database query within the servlet. Once the bean has been instantiated and initialized by invoking its setter methods by the servlet, it can be placed within the request object and forwarded to a display JSP page as follows: com.foo.dbBean bean = new com.foo.dbBean(); Page 43 of 210

//call setters to initialize bean req.setAttribute("dbBean", bean); url="..."; //relative url for display jsp page ServletContext sc = getServletContext(); RequestDispatcher rd = sc.getRequestDispatcher(url); rd.forward(req, res); The bean can then be accessed within the JSP page via the useBean tag as: <jsp:useBean id="dbBean" class="com.foo.dbBean" scope="request"/> ... <% //iterate through the rows within dbBean and //access the values using a scriptlet %> Also, it is best to design your application such that you avoid placing beans into the session unless absolutely necessary. Placing large objects within the session imposes a heavy burden on the performance of the servlet engine. Of course, there may be additional design considerations to take care of - especially if your servlets are running under a clustered or fault-tolerant architecture. 39) How can I use a servlet to generate a site using frames? In general, look at each frame as a unique document capable of sending its own requests and receiving its own responses. You can create a top servlet (say, FrameServlet) that upon invocation creates the frame layout you desire and sets the SRC parameters for the frame tags to be another servlet, a static page or any other legal value for SRC. ---------------------- SAMPLE ---------------------public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { response.setContentType("text/html"); PrintWriter out = new PrintWriter (response.getWriter()); out.println("<html>"); out.println("<head>Your Title</head>"); // definingthe three rows of Frames for the main page

Page 44 of 210

// top : frm_1 // middle : frm_2 // bottom : frm_3 out.println("<frameset rows=12%,70%,* cols=*>"); out.println("<frame src=/servlets/MenuServlet name=frm_1>"); out.println("<frame src=/servlets/DummyServlet?mode=full name=frm_2>"); out.println("<frame src=/servlets/DummyServlet?mode=small name=frm_3>"); out.println("</frameset>"); out.println("<body>"); out.println("</body></html>"); out.close(); -------------------------- END -----------------------------------------Where MenuServlet and DummyServlet provide content and behavior for the frames generated by FrameServlet. 40) What is HTTP tunneling, in the general sense? HTTP tunneling is a general technique whereby arbitrary data may be sent via an HTTP connection to and from CGI scripts or Java Servlets on a Web server. This is done by serializing the data to be transmitted into a stream of bytes, and sending an HTTP message with content type "application/octet-stream". HTTP tunneling is also referred to as Firewall tunneling.

41) How do I handle FORMs with multiple form elements (e.g. radio buttons) using the same name? For radio buttons, the HTML spec assumes that a given group of buttons will have the same NAME and different VALUEs; the browser makes sure that only one button per group name will be selected (at most). So you can just call request.getParameter("groupname"). <input type="radio" name="topping" value="cheese" checked>Cheese

Page 45 of 210

<input type="radio" name="topping" value="pepperoni">Pepperoni <input type="radio" name="topping" value="anchovies">Anchovies If the user selects "Pepperoni" then request.getParameter("topping") will return the string "pepperoni". For lists using the <select multiple> FORM tag, multiple values can be returned for the same parameter name. When that can happen, use request.getParameterValues("param") which returns a String[] you can iterate through. It's bad form (so to speak), but you can also duplicate other element types, like Name 1: <input type="text" name="name" value="Dick"> Name 2: <input type="text" name="name" value="Jane"> These also get returned in an array by request.getParameterValues(). 42) How do I separate presentation (HTML) from business logic (Java) when using servlets? Almost anybody who has ever written a servlet can identify with this one. We all know it's bad for to embed HTML code in our java source; it's lame to have to recompile and re-deploy every time you want an HTML element to look a bit different. But what are our choices here? There are two basic options; 1. Use JSP: Java Server Pages allows you to embed Java code or the results of a servlet into your HTML. You could, for instance, define a servlet that gives a stock quote, then use the <servlet> tag in a JSP page to embed the output. But then, this brings up the same problem; without discipline, your content/presentation and program logic are again meshed. I think the ideal here is to completely separate the two. 2. Use a templating/parsing system: Hmm...I know you're about to rant about re-inventing the wheel, but it's not that bad (see below). Plus, it really does pay to take this approach; you can have a group of

Page 46 of 210

programmers working on the Java code, and a group of HTML producers maintaining the interface. So now you probably want to know how to do it...so read on. Use SSI! Remember SSI? It hasn't gotten much attention in recent years because of embeddable scripting languages like ASP and JSP, but it still remains a viable option. To leverage it in the servlet world, I believe the best way is to use an API called SSI for Java from Areane. This API will let you emulate SSI commands from a templating system, and much more. It will let you execute any command on any system, including executing java classes! It also comes with several utility classes for creating stateful HTML form elements, tables for use with iteration, and much more. It's also open source, so it's free and you can tweak it to your heart's content! You can read the SSI for Java documentation for detailed info, but the following is an example of its use. Here's the servlet: import javax.servlet.*; import javax.servlet.http.*; import java.io.*; import java.util.*; import com.areane.www.ssi.*; public class SSITemplatingServlet extends HttpServlet { private String templateFilesDirectory = "d:\\projects\\idemo\\templates\\"; //Holds path to template files /**Handles GET requests; defers every request to the POST processor*/ public void doGet(HttpServletRequest req, HttpServletResponse res) throws ServletException, IOException, FileNotFoundException {doPost(req, res);} /**Handles all requests. Processes the request, *saves the values, parses the file, then feeds the file to the out stream*/ public void doPost(HttpServletRequest req, HttpServletResponse res) throws ServletException, IOException, FileNotFoundException { HttpSession ses = req.getSession(true); Properties context = null; if((context = (Properties)ses.getValue("user.context")) == null) { //if properties doesn't already exist, create it. context = new Properties(); } //Write parameters to Properties object

Page 47 of 210

Enumeration paramNames = req.getParameterNames(); String curName, curVal; while(paramNames.hasMoreElements()) { curName = (String)paramNames.nextElement(); curVal = req.getParameter(curName); context.setProperty(curName, curVal); } //Save the values to the session ses.putValue("user.context", context); //Parse the page and stream to the client String templateName = req.getParameter("template"); // Get the file name of the template to use res.setContentType("text/html"); SsiPagepage = SsiParser.parse(this.templateFilesDirectory + templateName); //Parsing occurs here page.write(res.getWriter(), context); //Stream to the client page = null; //clean up } } Now, just create a template file, pass the servlet the template file name, and have at it!

43) For an HTML FORM with multiple SUBMIT buttons, how can a servlet ond differently for each button? The servlet will respond differently for each button based on the html that you have placed in the HTML page. Let's explain. For a submit button the HTML looks like <input type=submit name="Left" value="left">. A servlet could extract the value of this submit by using the getParameter("Left") from the HttpRequest object. It follows then that if you have HTML within a FORM that appears as: <input type=submit name="Direction" value="left"><br> <input type=submit name="Direction" value="right"><br> <input type=submit name="Direction" value="up"><br> <input type=submit name="Direction" value="down"><br>

Page 48 of 210

Then the getParameter("Direction") from the HttpRequest would extract the value pressed by the user, either "left", "right", "up" or "down". A simple comparision in the servlet with the these values could occur and processing based on the submit button would be performed. Similiarly,for submit buttons with different names on a page, each of these values could be extracted using the getParameter() call and acted on. However, in a situation where there are multiple buttons, common practice would be to use one name and multiple values to identify the button pressed. 44) What is meant by the term "business logic"? "Business logic" is just a fancy way of saying "code." :-) More precisely, in a three-tier architecture, business logic is any code that is not specifically related to storing and retrieving data (that's "data storage code"), or to formatting data for display to the user (that's "presentation logic"). It makes sense, for many reasons, to store this business logic in separate objects; the middle tier comprises these objects. However, the divisions between the three layers are often blurry, and business logic is more of an ideal than a reality in most programs. The main point of the term is, you want somewhere to store the logic and "business rules" (another buzzword) of your application, while keeping the division between tiers clear and clean. 45) How can I explicitly unload a servlet or call the destroy method? In general, you can't. The Servlet API does not specify when a servlet is unloaded or how the destroy method is called. Your servlet engine (ie the implementation of the interfaces in the JSDK) might provide a way to do this, probably through its administration interface/tool (like Webshpere or JWS). Most servlet engines will also destroy and reload your servlet if they see that the class file(s) have been modified. 46) What is a servlet bean? A servlet bean is a serializable servlet that follows the JavaBeans component architecture, basically offering getter/setter methods. As long as you subclass GenericServlet/HttpServlet, you are automatically Serializable.

Page 49 of 210

If your web server supports them, when you install the servlet in the web server, you can configure it through a property sheet-like interface. 47) Why do we need to call super.init(config) in the init method of a servlet? Just do as you're told and you won't get hurt! :-) Because if you don't, then the config object will get lost. Just extend HttpServlet, use init() (no parameters) and it'll all work ok. From the Javadoc: init() - A convenience method which can be overridden so that there's no need to call super.init(config). 48) What is a servlet engine? A "servlet engine" is a program that plugs in to a web server and runs servlets. The term is obsolete; the preferred term now is "servlet container" since that applies both to plug-in engines and to stand-alone web servers that support the Servlet API. 49) Which is the most efficient (i.e. processing speed) way to create a server application that accesses a database: A Servlet using JDBC; a JSP page using a JavaBean to carry out the db access; or JSP combined with a Servlet? Are these my only choices? Your question really should be broken in two. 1-What is the most efficient way of serving pages from a Java object?. There you have a clear winner in the Servlet. Althought if you are going to change the static content of the page often is going to be a pain because you'll have to change Java code. The second place in speed is for JSP pages. But, depending on your application, the difference in speed between JSP pages and raw servlets can be so small that is not worth the extra work of servlet programming. 2-What is the most efficient way of accessing a database from Java?. If JDBC is the way you want to go the I'd suggest to pick as many drivers as you can (II,III,IV or wathever) and benchmark them. Type I uses a JDBC/ODBC bridge and usually has lousy performance. Again, go for the simplest (usually type IV driver) solution if that meets you performance needs.

Page 50 of 210

For database applications, the performance bottleneck is usually the database, not the web server/engine. In this case, the use of a package that access JDBC with connection pooling at the application level used from JSP pages (with or withouth beans as middleware) is the usual choice. Of course, your applications requirements may vary. 50) How can I change the port of my Java Web Server from 8080 to something else? It is very simple. JAVA WEB SERVER comes with remote Web administration tool. You can access this with a web browser. Administration tool is located on port 9090 on your web server. To change port address for web server: 1. Access tool (http://hostname:9090) 2. Enter User Id/Password (by default it is admin/admin) 3. Select service (Web service) 4. Click on "manage" button. You will get a popup screen with all settings. 5. Click on network tree node, On right hand side you will get text box for entering port no. 6. Change port number with desire one. 7. click on restart button. 51) Can I send multiple responses for a single request? No. That doesn't even make sense :-) You can, however, send a "redirect", which tells the user's browser to send another request, possibly to the same servlet with different parameters. Search this FAQ on "redirect" to learn more. 52) What is FORM based login and how do I use it? Also, what servlet containers support it? Form based login is one of the four known web based login mechanisms. For completeness I list all of them with a description of their nature: 1. HTTP Basic Authentication An authentication protocol defined within the HTTP protocol (and based on headers). It indicates the HTTP realm for which access is

Page 51 of 210

being negotiated and sends passwords with base64 encoding, therefore it is not very secure. (See RFC2068 for more information.) 2. HTTP Digest Authentication Like HTTP Basic Authentication, but with the password transmitted in an encrypted form. It is more secure than Basic, but less then HTTPS Authentication which uses private keys. Yet it is not currently in widespread use. 3. HTTPS Authentication (SSL Mutual Authentication) This security mechanism provides end user authentication using HTTPS (HTTP over SSL). It performs mutual (client & server) certificate based authentication with a set of different cipher suites. 4. Form Based Login A standard HTML form (static, Servlet/JSP or script generated) for logging in. It can be associated with protection or user domains, and is used to authenticate previously unauthenticated users. The major advantage is that the look and feel of the login screen can be controlled (in comparison to the HTTP browsers' built in mechanisms). To support 1., 3., and 4. of these authentication mechanisms is a requirement of the J2EE Specification (as of v1.2, 3.4.1.3 Required Login Mechanisms). (HTTP Digest Authentication is not a requirement, but containers are encouraged to support it.) You can also see section 3.3.11.1 of the J2EE Specs. (User Authentication, Web Client) for more detailed descriptions of the mechanisms. Thus any Servlet container that conforms to the J2EE Platform specification should support form based login. To be more specific, the Servlet 2.2 Specification describes/specifies the same mechanisms in 11.5 including form based login in 11.5.3. This section (11.5.3) describes in depth the nature, the requirements and the naming conventions of form based login and I suggest to take a look at it. Here is a sample of a conforming HTML login form: <form method="POST" action="j_security_check">

Page 52 of 210

<input type="text" name="j_username"> <input type="password" name="j_password"> </form> Known Servlet containers that support FORM-based login are:

iPlanet Application Server Tomcat (the reference implementation of the Java Servlet API)

53) How do I capture a request and dispatch the exact request (with all the parameters received) to another URL? As far as i know it depends on the location of the next target url.

If the next servlet url is in the same host, then you can use the forward method. Here is an example code about using forward: RequestDispatcher rd = null; String targetURL = "target_servlet_name"; ServletContext ctx = this.getServletContext(); rd = ctx.getRequestDispatcher(targetURL); rd.forward(request, response);

54) How can the data within an HTML form be refreshed automatically whenever there is a change in the database? JSP is intended for dynamically generating pages. The generated pages can include wml, html, dhtml or whatever you want... When you have a generated page, JSP has already made its work. From this moment you have a page. If you want automatic refreshing, then this should be acomplished by the technology included in the generated page (JSP will tell only what to include in the page). The browser can not be loaded by extern factors. The browser is the one who fetches url's since the http protocol is request-response based. If a server can reload a browser without its allow, it implies that we could be receiving pages which we haven't asked for from servers. May you could use applets and a ServerSocket for receiving incoming signals from the server for changed data in the DB. This way you can load

Page 53 of 210

new information inside the applet or try to force a page reload. [That's a nice idea -- it could use the showDocument() call to reload the current page. It could also use HTTP polling instead of maintaining an expensive socket connection. -Alex] Perhaps (if possible), could be simpler using an automatic JavaScript refreshing function that force page reload after a specified time interval. 55) What is a web application (or "webapp")? A web application is a collection of servlets, html pages, classes, and other resources that can be bundled and run on multiple containers from multiple vendors. A web application is rooted at a specific path within a web server. For example, a catalog application could be located at http:// www.mycorp.com/catalog. All requests that start with this prefix will be routed to the ServletContext which represents the catalog application. 56) How can I call a servlet from a JSP page? How can I pass variables from the JSP that the servlet can access? You can use <jsp:forward page="/relativepath/YourServlet" /> or response.sendRedirect("http://path/YourServlet"). Variables can be sent as: <jsp:forward page=/relativepath/YourServlet> <jsp:param name="name1" value="value1" /> <jsp:param name="name2" value="value2" /> </jsp:forward> You may also pass parameters to your servlet by specifying response.sendRedirect("http://path/YourServlet?param1=val1"). 57) Can there be more than one instance of a servlet at one time ? It is important to note that there can be more than one instance of a given Servlet class in the servlet container. For example, this can occur where there was more than one servlet definition that utilized a specific servlet class with different initialization parameters. This can also occur when a servlet implements the SingleThreadModel interface and the container creates a pool of servlet instances to use.

Page 54 of 210

58) How can I measure the file downloading time using servlets? ServletOutputStream out = response.getOutputStream(); String filename = getServletContext().getRealPath(request.getQueryString()); FileInputStream fin = new FileInputStream(filename); long start = System.currentTimeMillis(); byte data[] = new byte[1024]; int len = 0; while ((len = fin.read(data)) > 0) { out.write(data, 0, len); } out.flush(); long stop = System.currentTimeMills(); log("took " + (stop - start) + "ms to download " + filename); 59) What is inter-servlet communication? As the name says it, it is communication between servlets. Servlets talking to each other. [There are many ways to communicate between servlets, including

Request Dispatching HTTP Redirect Servlet Chaining HTTP request (using sockets or the URLConnection class) Shared session, request, or application objects (beans) Direct method invocation (deprecated) Shared static or instance variables (deprecated)

Search the FAQ, especially topic Message Passing (including Request Dispatching) for information on each of these techniques. -Alex] Basically interServlet communication is acheived through servlet chaining. Which is a process in which you pass the output of one servlet as the input to other. These servlets should be running in the same server. e.g. ServletContext.getRequestDispatcher(HttpRequest, HttpResponse).forward("NextServlet") ; You can pass in the current request and response object from the latest form submission to the next servlet/JSP. You can modify these objects and pass them so that the next servlet/JSP can use the results of this servlet. There are some Servlet engine specific configurations for servlet chaining.

Page 55 of 210

Servlets can also call public functions of other servlets running in the same server. This can be done by obtaining a handle to the desired servlet through the ServletContext Object by passing it the servlet name ( this object can return any servlets running in the server). And then calling the function on the returned Servlet object. e.g. TestServlet test= (TestServlet)getServletConfig().getServletContext().getServlet("OtherServl et"); otherServletDetails= Test.getServletDetails(); You must be careful when you call another servlet's methods. If the servlet that you want to call implements the SingleThreadModel interface, your call could conflict with the servlet's single threaded nature. (The server cannot intervene and make sure your call happens when the servlet is not interacting with another client.) In this case, your servlet should make an HTTP request to the other servlet instead of direct calls. Servlets could also invoke other servlets programmatically by sending an HTTP request. This could be done by opening a URL connection to the desired Servlet. 60) How do I make servlet aliasing work with Apache+Tomcat? When you use Tomcat standalone as your web server, you can modify the web.xml in $TOMCAT_HOME/webapps/myApp/WEB-INF to add a urlpattern: <web-app> <servlet> <servlet-name> myServlet </servlet-name> <servlet-class> myServlet </servlet-class> </servlet> <servlet-mapping> <servlet-name> myServlet </servlet-name> <url-pattern> /jsp-bin/* </url-pattern> </servlet-mapping> </web-app>

Page 56 of 210

This will let you use: http://webserver:8080/myApp/jsp-bin/stuff.html instead of: http://webserver:8080/myApp/servlet/myServlet/stuff.html But it won't work on port 80 if you've integrated Tomcat with Apache. Graeme Wallace provided this trick to remedy the situation. Add the following to your tomcat-apache.conf (or to a static version of it, since tomcat regenerates the conf file every time it starts): <LocationMatch /myApp/jsp-bin/* > SetHandler jserv-servlet </LocationMatch> This lets Apache turn over handling of the url pattern to your servlet. 61) Is there any way to determine the number of concurrent connections my servlet engine can handle? Depends on whether or not your servlet container uses thread pooling. If you do not use a thread pool, the number of concurrent connections accepted by Tomcat 3.1, for example, is 10. This you can see for yourself by testing a servlet with the Apache JMeter tool. However, if your servlet container uses a thread pool, you can specify the number of concurrent connections to be accepted by the container. For Tomcat 3.1, the information on how to do so is supplied with the documentation in the TOMCAT_HOME/doc/uguide directory. 62) What is a request dispatcher and how does it work? A RequestDispatcher object can forward a client's request to a resource or include the resource itself in the response back to the client. A resource can be another servlet, or an HTML file, or a JSP file, etc. You can also think of a RequestDispatcher object as a wrapper for the resource located at a given path that is supplied as an argument to the getRequestDispatcher method. For constructing a RequestDispatcher object, you can use either the ServletRequest.getRequestDispatcher() method or the ServletContext.getRequestDispatcher() method. They both do the same thing, but impose slightly different constraints on the argument path. For the former, it looks for the resource in the same webapp to which the invoking servlet belongs and the pathname specified can be relative to invoking servlet. For the latter, the pathname must begin with '/' and is interpreted relative to the root of the webapp.

Page 57 of 210

To illustrate, suppose you want Servlet_A to invoke Servlet_B. If they are both in the same directory, you could accomplish this by incorporating the following code fragment in either the service method or the doGet method of Servlet_A: RequestDispatcher dispatcher = getRequestDispatcher("Servlet_B"); dispatcher.forward( request, response ); where request, of type HttpServletRequest, is the first parameter of the enclosing service method (or the doGet method) and response, of type HttpServletResponse, the second. You could accomplish the same by RequestDispatcher dispatcher=getServletContext().getRequestDispatcher( "/servlet/Servlet_B" ); dispatcher.forward( request, response ); 63) What is a Servlet Context? A Servlet Context is a grouping under which related servlets (and JSPs and other web resources) run. They can share data, URL namespace, and other resources. There can be multiple contexts in a single servlet container. The ServletContext object is used by an individual servlet to "call back" and obtain services from the container (such as a request dispatcher). Read the JavaDoc for javax.servlet.ServletContext for more information. You can maintain "application global" variables by using Servlet Context Attributes. 64) Does the RequestDispatcher expect a relative URL to be relative to the originally-called servlet or to the current servlet (if different)? Since the RequestDispatcher will be passing the control (request object and response object) from the current Servlet, the relative URL must be relative to the current servlet. The originally called servlet has passed the control to the current servlet, and now current servlet is acting as controller to other resourses. 65) What is the difference between in-process and out-of-process servlet containers?

Page 58 of 210

The in-process Servlet containers are the containers which work inside the JVM of Web server, these provides good performance but poor in scalibility. The out-of-process containers are the containers which work in the JVM outside the web server. poor in performance but better in scalibility In the case of out-of-process containers, web server and container talks with each other by using the some standard mechanism like IPC. In addition to these types of containers, there is 3rd type which is stand-alone servlet containers. These are an integral part of the web server. 66) How is SingleThreadModel implemented in Tomcat? In other containers? [I would assume that Tomcat uses its connection thread pool, and creates a new instance of the servlet for each connection thread, instead of sharing one instance among all threads. Is that true?] The question mixes together two rather independent aspects of a servlet container: "concurrency control" and "thread pooling". Concurrency control, such as achieved by having a servlet implement the SingleThreadModel interface, addresses the issue of thread safety. A servlet will be thread-safe or thread-unsafe regardless of whether the servlet container used a thread pool. Thread pooling merely eliminates the overhead associated with the creation and destruction of threads as a servlet container tries to respond to multiple requests received simultaneously. It is for this reason that the specification document for Servlet 2.2 API is silent on the subject of thread pooling -- as it is merely an implementation detail. However, the document does indeed address the issue of thread safety and how and when to use SingleThreadModel servlets. Section 3.3.3.1 of the Servlet 2.2 API Specification document says that if a servlet implements the SingleThreadModel it is guaranteed "that only one request thread at time will be allowed in the service method." It says further that "a servlet container may satisfy this guarantee by serializing requests on a servlet or by maintaining a pool of servlet instances." Obviously, for superior performance you'd want the servlet container to create multiple instances of a SingleThreadModel type servlet should there be many requests received in quick succession. Whether or not a servlet container does that depends completely on the implementation. My experiments show that Tomcat 3.1 does indeed create multiple instances of a SingleThreadModel servlet, but only for the first batch of requests received concurrently. For subsequent batches of concurrent requests, it seems to use only one of those instances.

Page 59 of 210

67) Which servlet containers have persistent session support? Specifically, does Tomcat 3.1? All servlet containers that implement the Servlet 2.2 API must provide for session tracking through either the use of cookies or through URL rewriting. All Tomcat servlet containers support session tracking. 68) Can I use JAAS as the authentication technology for servlets ? Yes, JAAS can be used as authentication technology for servlets. One important feature of JAAS is pure Java implementation. The JAAS infrastructure is divided into two main components: an authentication component and an authorization component. The JAAS authentication component provides the ability to reliably and securely determine who is currently executing Java code, regardless of whether the code is running as an application, an applet, a bean, or a servlet. 69) How can I set a servlet to load on startup of the container, rather than on the first request? The Servlet 2.2 spec defines a load-on-startup element for just this purpose. Put it in the <servlet> section of your web.xml deployment descriptor. It is either empty (<load-on-startup/>) or contains "a positive integer indicating the order in which the servlet should be loaded. Lower integers are loaded before higher integers. If no value is specified, or if the value specified is not a positive integer, the container is free to load it at any time in the startup sequence." For example, <servlet> <servlet-name>foo</servlet-name> <servlet-class>com.foo.servlets.Foo</servlet-class> <load-on-startup>5</load-on-startup> </servlet> Some servlet containers also have their own techniques for configuring this; please submit feedback with information on these. 70) Is it possible to write a servlet that acts as a FTP server? Yes. It would spawn a thread that opens a ServerSocket, then listens for incoming connections and speaks the FTP protocol.

Page 60 of 210

71) Is there a way to disable a user's ability to double-click a submit image/button (and therefore submitting duplicate data -- multiple submits)? Is there a way to do this with Javascript? Give the submit image (or button) an onClick() handler. Have the handler check if a flag is set and if not set the flag and submit the form and then clear the form. 72) What are the main differences between Servlets and ISAPI? The first difference is obviously that Servlets is the technology from Sun Microsystems and ISAPI is from Microsoft. Other Differences are: Servlet is a simple .class file and ISAPI is a DLL Servlets run in the Servlet containers and may be in-process or out of process. ISAs run in the same address space as the HTTP server Servlet container preprocesses and postprocesses the data communication between the client and server. ISAPI Filters provide the capability of pre-processing and post-processing of all data sent between the client and the server Java is the only choice for writing Servlets, VC++/MFC is used to write ISAPI code Servlets works on most of the Web servers plus third party containers can be integrated with other web servers to provide servlets on them. ISAPI works on only ISAPI-compliant Web server (for example, Microsoft Internet Information Server) Servlets can connect to the Databases through JDBC as well as jdbcodbc bridges. ISAPI can connect to Databases through only ODBC Servlets have access to many server-side technologies like EJB and etc. ISAPI is limited in scope Multiple commands can be implemented in a servlet by using pathinfo. ISAPI allows multiple commands in one DLL, implemented as member functions of the CHttpServer object in the DLL.

Page 61 of 210

Content generation and content presentation can be done seperately in Servlets with the help of JSP. ISAPI code has to generate HTML code itself. 73) Can I associate a servlet with a particular mime-type, so if the client requests a file of that type, my servlet will be executed? In web.xml you can use a mime-mapping to map the type with a certain extension and then map the servlet to that extension. e.g. <mime-mapping> <extension> zzz </extension> <mime-type> text/plain </mime-type> </mime-mapping> <servlet-mapping> <url> *.zzz </url> <servlet-name> MyServlet </servlet-name> </servlet-mapping> So, when a file for type zzz is requested, the servlet gets called. 74) What are the different cases for using sendRedirect() vs. getRequestDispatcher()? When you want to preserve the current request/response objects and transfer them to another resource WITHIN the context, you must use getRequestDispatcher or getNamedDispatcher. If you want to dispatch to resources OUTSIDE the context, then you must use sendRedirect. In this case you won't be sending the original request/response objects, but you will be sending a header asking to the browser to issue a request to the new URL. If you don't need to preserve the request/response objects, you can use either.

Page 62 of 210

75) How do I access the value of a cookie using JavaScript? You can manipulate cookies in JavaScript with the document.cookie property. You can set a cookie by assigning this property, and retrieve one by reading its current value. The following statement, for example, sets a new cookie with a minimum number of attributes: document.cookie = "cookieName=cookieValue"; And the following statement displays the property's value: alert(document.cookie); The value of document.cookie is a string containing a list of all cookies that are associated with a web page. It consists, that is, of name=value pairs for each cookie that matches the current domain, path, and date. The value of the document.cookie property, for instance, might be the following string: cookieName1=cookieValue1; cookieName2=cookieValue2; 76) How do I write to a log file using JSP under Tomcat? Can I make use of the log() method for this? Yes, you can use the Servlet API's log method in Tomcat from within JSPs or servlets. These messages are stored in the server's log directory in a file called servlet.log. 77) How can I use a servlet to print a file on a printer attached to the client? The security in a browser is designed to restrict you from automating things like this. However, you can use JavaScript in the HTML your servlet returns to print a frame. The browser will still confirm the print job with the user, so you can't completely automate this. Also, you'll be printing whatever the browser is displaying (it will not reliably print plug-ins or applets), so normally you are restricted to HTML and images. [The JavaScript source code for doing this is:

Page 63 of 210

<input type="button" onClick="window.print(0)" value="Print This Page"> 78) How do you do servlet aliasing with Apache and Tomcat? Servlet aliasing is a two part process with Apache and Tomcat. First, you must map the request in Apache to Tomcat with the ApJServMount directive, e.g., ApJServMount /myservlet /ROOT Second, you must map that url pattern to a servlet name and then to a servlet class in your web.xml configuration file. Here is a sample exerpt: <servlet> <servlet-name>myservlet</servlet-name> <servlet-class>com.mypackage.MyServlet</servlet-class> </servlet> <servlet-mapping> <servlet-name>myservlet</servlet-name> <url-pattern>/myservlet</url-pattern> </servlet-mapping> 79 ) I want my servlet page to redirect to a login page if the session has timed out. How can I know if my session has timed out? If the servlet engine does the time-out, following code should help you: //assume you have a HttpServletRequest request if(request.getSession(false)==null) { //no valid session (timeouted=invalid) //code to redirect to login page } 80) Can Tomcat be configured to interpret all, or selected, .html files within a given context as JSP? Or, do JSP files have to end with a .jsp extension? yes you can do that by modifying the web.xml file. You will have to invoke the org.apache.jasper.runtime.JspServlet for all the requests having extension .html. You can do that by changing the Servlet mapping code: <servlet-mapping> <servlet-name> jsp </servlet-name>

Page 64 of 210

<url>*.html</url> </servlet-mapping> And comment out the following block <mime-mapping> <extension> html </extension> <mime-type> text/html </mime-type> </mime-mapping> 81) What is the difference between request attributes, session attributes, and ServletContext attributes? A ServletContext attribute is an object bound into a context through ServletContext.setAttribute() method and which is available to ALL servlets (thus JSP) in that context, or to other contexts via the getContext() method. By definition a context attribute exists locally in the VM where they were defined. So, they're unavailable on distributed applications. Session attributes are bound to a session, as a mean to provide state to a set of related HTTP requests. Session attributes are available ONLY to those servlets which join the session. They're also unavailable to different JVMs in distributed scenarios. Objects can be notified when they're bound/unbound to the session implementing the HttpSessionBindingListener interface. Request attributes are bound to a specific request object, and they last as far as the request is resolved or while it keep dispatched from servlet to servlet. They're used more as comunication channel between Servlets via the RequestDispatcher Interface (since you can't add Parameters...) and by the container. Request attributes are very useful in web apps when you must provide setup information between information providers and the information presentation layer (a JSP) that is bound to a specific request and need not be available any longer, which usually happens with sessions without a rigorous control strategy. Thus we can say that context attributes are meant for infra-structure such as shared connection pools, session attributes to contextual information

Page 65 of 210

such as user identification, and request attributes are meant to specific request info such as query results. 82) Are singleton/static objects shared between servlet contexts? [Question continues: For example if I have two contexts on a single web server, and each context uses a login servlet and the login servlet connects to a DB. The DB connection is managed by a singleton object. Do both contexts have their own instance of the DB singleton or does one instance get shared between the two?] It depends on from where the class is loaded. The classes loaded from context's WEB-INF directory are not shared by other contexts, whereas classes loaded from CLASSPATH are shared. So if you have exactly the same DBConnection class in WEB-INF/classes directory of two different contexts, each context gets its own copy of the singleton (static) object. 83) When building web applications, what are some areas where synchronization problems arrise? In general, you will run into synchronization issues when you try to access any shared resource. By shared resource, I mean anything which might be used by more than one request. Typical examples include:

Connections to external servers, especially if you have any sort of pooling. Anything which you include in a HttpSession. (Your user could open many browser windows and make many simultaneous requests within the one session.) Log destinations, if you do your own logging from your servlets.

84) What is the difference between apache webserver, java webserver and tomcat server? Apache is an HTTP server written in C that can be compiled and run on many platforms. Java WebServer is an HTTP server from Sun written in Java that also supports Servlets and JSP.

Page 66 of 210

Tomcat is an open-source HTTP server from the Apache Foundation, written in Java, that supports Servlets and JSP. It can also be used as a "plug-in" to native-code HTTP servers, such as Apache Web Server and IIS, to provide support for Servlets (while still serving normal HTTP requests from the primary, native-code web server). 85) How can you embed a JavaScript within servlets / JSP pages? You don't have to do anything special to include JavaScript in servlets or JSP pages. Just have the servlet/JSP page generate the necessary JavaScript code, just like you would include it in a raw HTML page. The key thing to remember is it won't run in the server. It will run back on the client when the browser loads the generate HTML, with the included JavaScript. 86) How can I make a POST request through response.sendRedirect() or response.setStatus() and response.setHeader() methods? You can't. It's a fundamental limitation of the HTTP protocol. You'll have to figure out some other way to pass the data, such as

Use GET instead Make the POST from your servlet, not from the client Store data in cookies instead of passing it via GET/POST

87) How do I pass a request object of one servlet as a request object to another servlet? Use a Request Dispatcher. 88) I call a servlet as the action in a form, from a jsp. How can I redirect the response from the servlet, back to the JSP? (RequestDispatcher.forward will not help in this case, as I do not know which resource has made the request. request.getRequestURI will return the uri as contained in the action tag of the form, which is not what is needed.) You'll have to pass the JSP's URI in to the servlet, and have the servlet call sendRedirect to go back to the JSP. For example: <FORM ACTION="/foo/myservlet"> <INPUT TYPE="HIDDEN" NAME="redirect" VALUE="/foo/thisjsp.jsp">

Page 67 of 210

Shoe size: <INPUT NAME="shoesize"> <INPUT TYPE="SUBMIT"> </FORM> Then in the servlet... response.sendRedirect(request.getParameter("redirect")); 89) What is the ServletConfig object, and why is it useful? The ServletConfig object is an interface. It contains the methods getInitParameter getInitParameterNames getServletContext getServletName You can use the methods to determine the Servlet's initialization parameters, the name of the servlets instance, and a reference to the Servlet Context the servlet is running in. getServletContext is the most valuable method, as it allows you to share information accross an application (context). 90) I have a global variable in a servlet class. What will happen to this global variable if two requests hit on the same time? What will happen is an unforeseeable event. The best way to establish a default occurrence (the servlet handles a request at a time) is to synchronize the access to the global variable or alternatively to create a servlet that implements the SingleThreadModel interface. 91) Suppose I have 2 servers, server1 and server2. How can I take data in a cookie from server1, and send it to server2? You'll have to create a (new) similar cookie on server 2. Have a ReadCookieServlet running on server1 that

Reads the cookie, using request.getCookies() Redirects to WriteCookieServlet running on server2, passing the cookie name, value and expiration date as request parameters, using response.sendRedirect().

Page 68 of 210

Have a WriteCookieServlet running on server2 that

Reads the cookie name, value and expiration date request parameters, using request.getParameter(). Creates a similar cookie, using response.addCookie().

92) How can I pass data from a servlet running in one context (webapp) to a servlet running in another context? There are three ways I can think of off the top of my head: 1. Store the information you want to share in a persistant format, such as in a file system or database. That way, any servlet that is running in a JVM that can "see" these resources can get to this information. 2. If persisting this information is not an option, you can bind this information to a context that is accessible to all servlet contexts, such as the application server's context. This way, you can keep the data you want to share in memory. 3. Use the old fashion way of passing information to a servlet - HTTP. One servlet could foward a request to another servlet and include the data that needs to be shared as parameters in the request. 93) How can I write an "error page" -- that is, a servlet or JSP to report errors of other servlets? The Servlet 2.2 specification allows you to specify an error page (a servlet or a JSP) for different kinds of HTTP errors or ServletExceptions. You can specify this in deployment descriptor of the web application as: <error-page> <exception-type>FooException</exception-type> <location>/error.jsp</location> </error-page> where FooException is a subclass of ServletException. The web container invokes this servlet in case of errors, and you can access the following information from the request object of error servlet/JSP: error code, exception type, and a message. 94) What is the difference between ServletContext and ServletConfig?

Page 69 of 210

A ServletContext represents the context in a servlet container of a servlet instance operates. A servlet container can have several contexts (or web applications) at one time. Each servlet instance is running in one of these contexts. All servlets instances running in the same context are part of the same web application and, therefore, share common resources. A servlet accesses these shared resource (such as a RequestDispatcher and application properties) through the ServletContext object. This notion of a web application became very significant upon the Servlet 2.1 API, where you could deploy an entire web application in a WAR file. Notice that I always said "servlet instance", not servlet. That is because the same servlet can be used in several web applications at one time. In fact, this may be common if there is a generic controller servlet that can be configured at run time for a specific application. Then, you would have several instances of the same servlet running, each possibly having different configurations. This is where the ServletConfig comes in. This object defines how a servlet is to be configured is passed to a servlet in its init method. Most servlet containers provide a way to configure a servlet at run-time (usually through flat file) and set up its initial parameters. The container, in turn, passes these parameters to the servlet via the ServetConfig. 95) Under what circumstances will a servlet be reloaded? That depends on the Servlet container. Most of the Servlet containers reload the servlet only it detects the code change in the Servlet, not in the referenced classes. In Tomcat's server.xml deployment descriptor, if you have mentioned <Context path="/myApp" docBase="D:/myApp/webDev" crossContext="true" debug="0" reloadable="true" trusted="false" > </Context> The reloadable = true makes the magic. Every time the Servlet container detects that the Servlet code is changed, it will call the destroy on the currently loaded Servlet and reload the new code.

Page 70 of 210

But if the class that is referenced by the Servlet changes, then the Servlet will not get loaded. You will have to change the timestamp of the servlet or stop-start the server to have the new class in the container memory. 96) What is a Servlet Filter? A filter is basically a component that is invoked whenever a resource is invoked for which the filter is mapped. The resource can be something like a servlet, or a URL pattern. A filter normally works on the request, response, or header attributes, and does not itself send a response to the client. 97) I am using the RequestDispatcher's forward() method to redirect to a JSP. The problem is that the jsp's url is now relative to the servlet's url and all my url's in the jsp such as <img src="pic.gif"> will be corrupt. How do I solve this problem? You can use absolute urls like: <BODY> <% String base = request.getContextPath(); %> <IMG src="<%=base%>/img/pic.gif"> </BODY> or write out a BASE tag like: <% String base = request.getContextPath(); %> <HEAD> <BASE HREF="<%=base%>"> </HEAD> <BODY> <IMG src="img/pic.gif"> </BODY> That should take care of the problem. 98) How can I return a readily available (static) HTML page to the user instead of generating it in the servlet? To solve your problem, you can either send a "Redirect" back to the client or use a RequestDispatcher and forward your request to another page: 1. Redirect: A redirection is made using the HttpServletResponse object: 2. if(condition) { 3. response.sendRedirect("page1.html");

Page 71 of 210

4. } else { 5. response.sendRedirect("page2.html"); 6. } 7. RequestDispatcher: A request dispatcher can be obtained through the ServletContext. It can be used to include another page or to forward to it. 8. if(condition) { 9. this.getServletContext() 10. .getRequestDispatcher("page1.html").forward(); 11. } else { 12. this.getServletContext() 13. .getRequestDispatcher("page2.html").forward(); 14. } Both solutions require, that the pages are available in you document root. If they are located somewhere else on your filesystem, you have to open the file manually and copy their content to the output writer. If your application server is set up in combination with a normal web server like Apache, you should use solution (1), because the the web server usually serves static files much faster than the application server. 99) What is the difference between static variables and instance variables in a servlet? According to the Java Language definition, a static variable is shared among all instances of a class, where a non-static variable -- also called an instance variable -- is specific to a single instance of that class. According to the Servlet specification, a servlet that does not declare SingleThreadModel usually has one and only one instance, shared among all concurrent requests hitting that servlet. That means that, in servlets (and other multithreaded applications), an instance variable behaves very much like a static variable, since it is shared among all threads. You have to be very careful about synchronizing access to shared data. The big difference between instance variables and static variables comes when you have configured your servlet engine to instantiate two instances of the same servlet class, but with different init parameters. In this case, there will be two instances of the same servlet class, which means two sets of instance variables, but only one set of static variables.

Page 72 of 210

Remember that you can store data in lots of different places in a servlet. To wit:

Local variables - for loop iterators, result sets, and so forth Request attributes - for data that must be passed to other servlets invoked with the RequestDispatcher Session attributes - persists for all future requests from the current user only Instance variables - for data that persists for the life of the servlet, shared with all concurrent users Static variables - for data that persists for the life of the application, shared with all concurrent users -- including any other servlet instances that were instantiated with different init parameters Context attributes - for data that must persist for the life of the application, and be shared with all other servlets

100) How can I share data between two different web applications? Different servlets may share data within one application via ServletContext. If you have a compelling to put the servlets in different applications, you may wanna consider using EJBs. [You can also use a database, or use the file system, but it's difficult to share the data inside the JVM. Even using statics may not work, since the two web applications may be using different classloaders. -Alex] 101) If the cookies at client side are disabled then session don't work, in this case how can we proceed? you may: 1. (from servlet) write the next page with a hidden field containing a unique ID that serves as "session ID". So next time when the user clicks submit, you can retrieve the hidden field. 2. If you use applet, you may avoid "view source" (so that people can't see the hidden field). Your applet reads back an ID from the servlet and use that from then on to make further requests. 102) How do I pass a parameter from a servlet to a JSP?

Page 73 of 210

You insert the object you need in the request scope with request.setAttribute() and then you use the RequestDispatcher to forward or include the jsp page. In the JSP page you use request.getAttribute() to get the object(s) back. If you need to read the form parameters, you just use the RequestDispatcher, because it passes the request object. 103) How do you pass parameters to servlets with web.xml? If you want something general (for the entire context, you should use something like this: ... <context-param> <param-name> NAME </param-name> <param-value> VALUE </param-value> </context-param> ... [These are accessible from Java by calling ...? -A] If you need to set parameters for a single servlet, then use the <initparam> tag inside the servlet tag: <servlet> <servlet-name>...</servlet-name> <servlet-class>...</servlet-class> <init-param> <param-name> NAME </param-name> <param-value> VALUE </param-value> </init-param> </servlet> [These are accessible from Java by calling getInitParameter("NAME") -A] 104) How can I distinguish between text file and binary file after I read a file onto my servlet? Reading it and checking the file's content: if it contains only chars in [a..z, A..Z, 0..9] and punctuation marks, it's a text file; viceversa, if it contains extended chars it isn't.

Page 74 of 210

Another good way, is to do it statistically: if it contains 85% (for example) of alphanumerical chars, probably it's a text file. You can take statistics on the first buffer read from the file to speed up checking. 105) When must I use clustering -- that is, a pool of web servers instead of a single web server? It really depends on the load of your system, and the hardware that you are using (or plan to use). A pool of web servers will definitely serve a higher number of pages and it will be more safe in a case of a crash of a system but, obviously, it's more expensive. In addition you need to have a good solution for making sure that once a session on a system it's started, that user will be always redirected to the same system, otherwise you have to handle your own session with a database or (bad!) with a networked file system. A single web server is normally the "starting solution" and if the system it's good and powerful enough, it could handle a really good amount of traffic. 106) Why doesn't Tomcat find classes in jars in the WEB-INF/lib directory? According to the Servlet 2.2 specifications: 9.4: Directory Structure A web application exists as a structured hierarchy of directories. The root of this hierarchy serves as a document root for serving files that are part of this context. For example, for a web application located at /catalog in a web server, the index.html file located at the base of the web application hierarchy can be served to satisfy a request to /catalog/index.html. A special directory exists within the application hierarchy named WEB-INF. This directory contains all things related to the application that arent in the document root of the application. It is important to note that the WEB-INF node is not part of the public document tree of the application. No file contained in the WEB-INF directory may be served directly to a client. The contents of the WEB-INF directory are:

Page 75 of 210

/WEB-INF/web.xml deployment descriptor /WEB-INF/classes/* directory for servlet and utility classes. The classes in this directory are used by the application class loader to load classes from. - /WEB-INF/lib/*.jar area for Java ARchive files which contain servlets, beans, and other utility classes useful to the web application. All such archive files are used by the web application class loader to load classes from.

I've never had this problem with either Tomcat and Resin, unless the file was not a jar but a zip (It happened with Oracle's drivers that are packaged ina file called classes12.zip). 107) How can I submit an HTTP POST request when the user clicks a normal HREF link? You can post to a servlet using JavaScript through HREF in the following way. Any parameters you need to send can be sent using the "hidden" parameters. <form name="submitForm" method="POST" action="/servlet/ServletName"> <input type="hidden" name="param1" value="param1Value"> <A HREF="javascript:document.submitForm.submit()">Click Me</A> </form> 108) How do I prevent users from viewing the contents of my WEB-INF directory? Servlet Engines (e.g. Resin or Tomcat) should not allow directory browsing of WEB-INF. Tomcat 3.2, for example, had that same issue and they have fixed it in Tomcat 3.2.1. This was happening when Tomcat was used standalone (not just as a container, but even as a web server). If this problem happens with a specific version of a standalone Resin, you should consider to try the latest version (I'm running 1.2.5) and, eventually, send a bug to Caucho. Consider that this issue should happen when using the container in standalone mode. When the container (Resin, Tomcat or abother one) is used just for serving servlet & jsp behind a more reliable and complete web server, like Apache, the problem is on Apache, that is serving everything else. When you ask for WEB-INF, in fact, Apache doesn't even connect to Tomcat, there is no reason.

Page 76 of 210

So, if this is your scenario, you should add lines like these: <Directory /WEB-INF> AllowOverride None Deny From All </Directory> Inside the virtual host or whatever you think is appropriate and, obviously, changing "/WEB-INF" with the appropriate context. 109)What is the difference between ServletContext.getInitParameter() and HttpServlet.getInitParameter() ? I am using Tomcat Web server.I am passing parameter in Web.xml using <context-param> <param-name>server</param-name> <param-value>xxxxxxx</param-value> </context-param> But when I am calling getInitParameter("server") in init method it is returning null value. How to resolve this? ] The <context-param> tag is used to set an init parameter for the whole application context, it is accessible by all Servlets and JSPs. You have to use getInitParameter() of javax.servlet.ServletContext, not the similar method found in HttpServlet. Just try the following method call in your servlet, it should return the correct parameter: getServletContext().getInitParameter("server") Alternatively, you can set an init parameter for a specific Servlet, it will only be accessible by this Servlet: <web-app> <servlet> <servlet-name>myservlet</servlet-name> <servlet-class>org.myorg.MyServlet</servlet-class> <init-parameter> <param-name>server</param-name> <param-value>xxxxxxx</param-value> </init-parameter> </servlet>

Page 77 of 210

... </web-app> To retrieve this parameter you just call getInitParameter() in your servlet. 110) How do I pass query parameters when I use Request Dispatcher? [I am using: reqDisp = servletContext.getRequestDispatcher("/applicationsecurity/RedirectLogin.j sp") reqDisp.forward(req,res); ] Since you're working with a request, nstead of using the getRequestDispatcher() method of the ServletContext, you should use the getRequestDispatcher of the HttpServletRequest object. reqDisp = request.getRequestDispatcher("/applicationsecurity/RedirectLogin.jsp"); reqDisp.forward(req,res); 111) What is the difference between a RequestDispatcher object obtained from the Request object and the RequestDispatcher object obtained from the ServletContext ? request.getRequestDispatcher("url").forward(request,response); and getServletConfig().getServletContext().getRequestDispatcher("url").forwar d(request,response); One : you can pass relative URL address when using request.getRequestdispather, and absolute URL address when using ServletConfig.getRequestDispatcher. Two: All request details are not passed when using ServletConfig.getRequestDispatcher. May be it is the query string parameters for the current page that does not reach the page where request is forwarded. (don't remember exactly..surf it out) 112) How do I use a RequestDispatcher to call one servlet from another servlet?

Page 78 of 210

To call another servlet you have to use a request dispatcher: RequestDispatcher rd = this.getServletConfig() .getServletContext() .getRequestDispatcher("/path-to-servlet"); rd.forward(); or rd.include(); 113) How do I load an applet from a servlet or JSP? Where do I place my applet class files? An applet is executed on the client side (browser), not on the server side (servlet container). You need to place the applet class files in a location accessible from the browser, which means you have to treat them like normal files (like HTML or GIF files that you want the browser to load). Thus they need to go in the webapp directory tree, but not in the WEBINF subdirectory. It is best to think of the set of applet class files as entirely different from the set of servlet class files. They will be loaded by different Virtual Machines, and may even have different versions of classes. It is a simple matter to configure your build environment (Ant or make) to create copies of common class files in the two different classpath directories. Since the concept of "current directory" is kind of fuzzy in the Servlet API, it is usually easiest to make a separate directory just for your applet class files, and use the optional CODEBASE parameter to the APPLET tag. Here is an architecture that works well: myapp/WEB-INF/classes/MyServlet.class myapp/WEB-INF/classes/Util.class myapp/index.html myapp/applets/MyApplet.class myapp/applets/Util.class Then if your servlet generates a line like: out.println("&amp;lt;APPLET CODE='MyApplet.class' WIDTH=50 HEIGHT=50 CODEBASE='/applets'&amp;gt;"&amp;gt;;

Page 79 of 210

The browser will be able to load MyApplet.class and Util.class from your /applets web directory. It will not be able to load anything from WEBINF/classes, since those files are accessible only by the servlet engine. Note that loading an applet from a page generated by a servlet is much the same as loading an image. It is also easier to use a common "images" directory in that case, so that images can be loaded from any page regardless of "current" directory. 114) Do objects stored in a HTTP Session need to be serializable? Or can it store any object? Yes, the objects need to be serializable, but only if your servlet container supports persistent sessions. Most lightweight servlet engines (like Tomcat) do not support this. However, many EJB-enabled servlet engines do. Even if your engine does support persistent sessions, it is usually possible to disable this feature. Read the documentation for your servlet engine. Note that this means that a JDBC Connection should not be stored in a session, however convenient that would be. You can put it in an application scope variable, or in a "transient" field of a private class. Read the docs for the Serializable interface to learn more. 115) How can I send a POST request from a Servlet or JSP? I've written some code (two servlets: a Source and a Target) to test this scenario: import javax.servlet.*; import javax.servlet.http.*; import java.io.*; import java.net.*; import java.util.*; public class Source extends HttpServlet { private static final String CONTENT_TYPE = "text/html"; public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { response.setContentType(CONTENT_TYPE);

Page 80 of 210

URL url; URLConnection urlConn; DataOutputStream cgiInput; // URL of target page script. url = new URL("http://localhost:8086/servlet/Target"); urlConn = url.openConnection(); urlConn.setDoInput(true); urlConn.setDoOutput(true); urlConn.setUseCaches(false); urlConn.setRequestProperty("Content-Type", "application/x-www-form-urlencoded"); // Send POST output. cgiInput = new DataOutputStream(urlConn.getOutputStream()); String content = "param1=" + URLEncoder.encode("first parameter") + "&param2=" + URLEncoder.encode("the second one..."); cgiInput.writeBytes(content); cgiInput.flush(); cgiInput.close(); // reads the CGI response and print it inside the servlet content BufferedReader cgiOutput = new BufferedReader(new InputStreamReader(urlConn.getInputStream())); PrintWriter servletOutput = response.getWriter(); servletOutput.print("<html><body><h1>This is the Source Servlet</h1><p />"); String line = null; while (null != (line = cgiOutput.readLine())){ servletOutput.println(line); } cgiOutput.close(); servletOutput.print("</body></html>"); servletOutput.close(); } }

import javax.servlet.*; import javax.servlet.http.*;

Page 81 of 210

import java.io.*; import java.util.*; public class Target extends HttpServlet { private static final String CONTENT_TYPE = "text/html"; public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { response.setContentType(CONTENT_TYPE); PrintWriter out = response.getWriter(); out.print("<h2>Target's output</h2><p /><pre><code>"); Enumeration enum = request.getParameterNames(); while (enum.hasMoreElements()){ String param = (String) enum.nextElement(); String value = request.getParameter(param); out.println("param=" + param + " value=" + value); } out.print("</code></pre>"); } } 116) Can two web applications (servlet contexts) share the same session object? By default, the session object is context-specific. Although a few servlet containers (Tomcat, Resin) may allow web applications to share session contexts by means of the "crosscontext" setting within the deployment descriptor, by default, that should not be allowed for security purposes and must be used cautiously only for admin-type applications. [For example: <Context path="/myapp" docBase="/home/web/myapp'" crossContext="true" debug="0" reloadable="false" trusted="false" /> 117) How to return a value from a servlet to a JSP? There are couple of ways to do this. 1. You can put the information you like in a HTTPSession object. This object is created for you and stays with the user during the time they are in the site. This is done like this: 2. HttpSession s = request.getSession(true);

Page 82 of 210

3. s.setAttribute("returnVal", callMethod()); The first row creates the session if there are no sessions. Next row sets the value you like in to the session object. Remember that in the JSP page you have to cast this object back to whatever object it is. All "things" in a session object are stored as java.lang.Objects. here is how that is done inside the JSP page: myObject = (myObject) session.getAttribute("returnVal");

4. The other way of doing this is to put the value in the request object. It is similar to the previous example, only it is the request object. Here is how that is done: 5. RequestDispatcher rd = getServletContext().getRequestDispatcher("/yourjsppage.jsp"); 6. request.setAttribute("myObject", getMyObject()); rd.forward(request, response); The first row gets the requestDispatcher, the second line adds your object to the request object and the last line forwards the request. In the JSP page you use the "request" object like this: myObject = (myObject)request.getAttribute("myObject"); 118) What is a session? What is the difference between session and cookie? session is an object associated with a client connection to the server. it has the ability to carry information related to the client. since http is a connectionless protocol, developers need an ability to "remember" what the client of the application did during the visit to the page. a great example of the need and use of session is a infamous shopping cart. as users browse through products they are interested in, they add products they want to buy to the 'shopping cart' this information needs to be stored somewhere so that when users decides to check-out and purchase the products, the system knows all the products client wants to purchase. so 'shopping cart' is stored in the session which drags along on each client invocation to the server until session expires. the way server handles session is server-specific. the specification does not specify exact implementation of the session. some web servers may use cookies, some may use something else. but overall, it is up to the implementer to decide how this is done.

Page 83 of 210

the difference between session and a cookie is two-fold. 1) session should work regardless of the settings on the client browser. even if users decide to forbid the cookie (through browser settings) session still works. there is no way to disable sessions from the client browser. 2) session and cookies differ in type and amount of information they are capable of storing. javax.servlet.http.Cookie class has a setValue() method that accepts Strings. javax.servlet.http.HttpSession has a setAttribute() method which takes a String to denote the name and java.lang.Object which means that HttpSession is capable of storing any java object. Cookie can only store String objects. 119) Can I place my classes somewhere other than inside WEB-INF? Sun's specifications for Servlet define only the WEB-INF/classes and WEB-INF/lib directories in order to make the web application portable. If you are not interested in portability, you can still put all your classes into the CLASSPATH environment variable. The startup script for Tomcat 3.2.x should automatically add that classpath to the one used by Tomcat, while, with version 4.0.x and 3.3.x, you definitely need to make a small change in the startup script to add the CLASSPATH environment to the one that is generated by the script to esecute Tomcat. The only issue is that the classes/jars you've added will be available to all the web applications running under that instance. 120) What are the steps that I need to follow to deploy my servlet in WebLogic 6.1? 1. Create a folder with any name of ur choice (say MyAssignment). 2. Create inside this the structure reqd. as per Servlet 2.2 API viz. MyAssignment | --WEB-INF | --classes 3. Place ur HTML,JSP files in MyAssignment folder(or any folder inside it but outside WEB-INF folder).

Page 84 of 210

4. Place your compiled servlet class file inside classes folder (or any folder inside it. Just use packages in that case). 5. Place the web.xml and weblogic.xml files in the WEB-INF folder. 6. Edit web.xml to read as: <!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.2//EN" "http://java.sun.com/j2ee/dtds/web-app_2_2.dtd"> <web-app> <display-name>My Web Assignment</display-name> <servlet> <servlet-name>CounterServlet</servlet-name> <servlet-class>CounterServlet</servlet-class> </servlet> <servlet-mapping> <servlet-name>CounterServlet</servlet-name> <url-pattern>/CounterServlet/*</url-pattern> </servlet-mapping> </web-app> 7. Copy the entire structure and place it inside the applications folder of Weblogic. 8. Deploy the web-app (see docs). 9. You can now access the servlet as: http://127.0.0.1:7001/MyAssignment/CounterServlet" [You can also cd to your project directory ("MyAssignment") and use jar, as jar cf ../myassignment.war * Then use the WebLogic deploy tool inside the console to deploy the WAR (the console is available in http://localhost:7001/console/ -A] 121) When two or more people are using my servlet, why does everyone see the data for the person who has logged in latest?

Page 85 of 210

It's probably because you're using instance variables to store data. Instance variables are dangerous in a servlet. Use session attributes instead. -Alex] If you still want your servlet multithreaded, try creating the data Object in one request (doGet), add the data Object to the users session, then forward to the second servlet where you pick up the object. // in first servlet doGet... HttpSession session = request.getSession(); session.setAttribute(dataBeanId, dataBean ); ... RequestDispatcher rd = request.getRequestDispatcher("servlet2uri"); rd.forward(request, response); // in the second servlet doGet... HttpSession session = request.getSession(); dataBean = (DataBean)session.getAttribute( dataBeanId ); 122) How do I pass some servlet variable to javascript? embedded the javascript code in the servlet such as: out.println("<scriptlanguage=\"JavaScript\" >"); out.println("<!-- hide from old browser..."); I have an array in servlet that need to be copied to a new array in the javascript, how do I do that? ----------------Normally, the result of servlet is an HTML page, which might contain JavaScript. So you can not copy contents of servlet variable to javascript variable directly like in following code for(int i=0; i<strAlpha.length;i++){ letterArray[i]=strAlpha[i]; } Servlets are executed at server while javascript is executed at client browser.

Page 86 of 210

The following code is actually creating javascript code which is then executed at client browser. out.print("var letterArray = new Array("); Boolean isFirst = true; //Iterator through Array for (int i=0; i < strAlpha.length; i++){ if (!isFirst){ out.print(","); <== Semi colon added } isFirst = false; out.print("'" + strAlpha[i] + "'"); <== Single quote and Semi colon added } out.println(");"); If you see HTML source code, you will see following lines : var letterArray = new Array('A','B','C','D','E','F','G','H','I'); 122) How can I access one servlet method from some other servlet in same context? You do not call methods on the servlet from other servlets. If you need to perform some functionality in many servlets, put that functionality in some other object that you can create from both servlets. Servlets are requestresponse mechanism and not just regular java classes that you call methods on it. 123) What is the difference between request.getAttribute() and request.getParameter()? In a request object you can store, on the server side, some object that can be useful during the processing of your pages. This uses request.setAttribute() and request.getAttribute(). Remember that the life of the request object lasts through all the include and forwards, and ends when the page has been sent back to the browser. The getParameter() method, instead, will return you the specific parameter that has been passed to the page through GET or POST. 124) What is a "Distributed Web Application"?

Page 87 of 210

Usually the word "distributed" refers to the system being composed of physically separate parts where different logic is performed in different places. A typical distributed web application is such that there is one "web server", which hosts the View and Controller parts of the MVC pattern and a separate (or several) "app server", which hosts the EJBs acting as the Model of the MVC pattern. The advantage of this approach is the flexibility of the infrastructure. You can scale the hardware only for the EJB layer if you want, you can locate the web server closer to your enterprise network's edge while leaving the app server behind more firewalls. 125)How do I map a JSP using web.xml and RequestDispatcher? It is not mandatory for JSPs to be registered in the web.xml but it is sometimes done; the <servlet-class> tag being replaced by the <jsp-file> tag (and others remaining the same). e.g <jsp-file>/index.jsp</jsp-file> And thus you can give a JSP an alias. Now when you want to forward to a servlet that doesn't have a urlmapping in the web.xml, you use getNamedDispathcer(servlet-name) else it should be the url-pattern when you are using getRequestDispatcher(path). This is what I have understood of it. The more hazy part is that even JSPs are compiled into servlets at runtime. But these servlets are accessible without specifying any url-pattern. 126) How do I access an Init Parameter set in web.xml from a JavaBean? You must get the init-param from servlet and load it into the bean, either defining a set method or passing it into the constructor. The init-param tag is for init parameters for the servlets and JSP and not for JavaBeans. They have other ways to load parameters (such as properties files and things like that). 127) Why shouldn't we make the service() method synchronized? Full question: When we implement singlethreadmodel it means that only one thread can access the service method at a time.now my question is

Page 88 of 210

,why can't we achieve the same thing my making the service() method synchronized. theory says that we shouldn't synchronize the service method. but what will happen if we do so,except from the performance problem?] Assume that you write a servlet and synchronize the service(...) (or any of the doXXX(...) methods or any method you call from any of these methods). Once you deploy the servlet, the servlet container receives ten "near-simultaneous" requests for the servlet. Upon receipt of the first request, the servlet container kicks off a thread and sends it on its way (i.e. starts it executing the service(...) method). Unbeknownst to the servlet container, the thread executing in the service(...) method "locks the door" behind it (holds the lock for the servlet object). Not knowing any better, the servlet container starts the other nine threads and assumes they are happily executing the service(...) method. In reality, each of the nine other threads finds the object (the servlet instance) locked, so they go into a "wait" state. Meanwhile, the first thread finishes executing the service(...) method, so it releases the lock on the servlet instance. One of the other threads--not necessarily the second thread, so we'll say the eighth thread--awakens to find the servlet's lock available, so it requests the lock and starts processing the service(...) method. Meanwhile, the servlet container may be receiving other requests. It's possible that when the eighth thread (which was the second to execute the service(...) method) finishes, the thirty-fifth thread grabs the lock. With this approach each thread has an "equal" probability of being the next allowed to execute the service(...) method. It's complete anarchy-every thread for itself. About this time, the person who sent the second request is calling you to say that your application is down. :) And, if you really want things to get complex, try synchronizing the service(...) method and the doXXX(...) methods... So what does the servlet container do? It provides queueing and prioritization (generally first-in-first-out) of requests. Some servlet containers instantiate multiple servlet objects (and maintain a servlet pool--remember that synchronizing a method locks the object (or instance), not the method, so multiple threads can execute the same method in different instances) to handle multiple simultaneous requests. (Note that this means that you may need to synchronize access of static members.)

Page 89 of 210

Others (like Tomcat, IIRC) provide as little support for SingleThreadModel servlets as is required by the servlet specification (they don't waste time creating object pools) since using SingleThreadModel is a "cop out." Keep reading, I'll explain why... :) Implementing the interface often gives developers a false sense of security when it comes to multi-threaded programming. For example, regardless of whether your servlet implements SingleThreadModel or not, you still need to consider synchronization problems with static members, HttpSession attributes, ServletContext attributes, and any other classes outside the scope of the servlet (i.e. JavaBeans, support classes, etc.). 128) What is the role of the controller in MVC architecture? The role of controller is to dictate what to do behind the scenes and what to display in the view next. 1. Controller receives a request 2. Controller decides the requested activities based on request parameters 3. Controller delegates tasks to be performed based on the request parameters 4. Controller delegates the next view to be shown There must be a lot better explanations for the controller's responsibilities, but at least I tried... As it comes to choosing between a JSP and a servlet for the controller implementation, servlet is the obvious choice as JSPs are designed for simplifying generating dynamic responses primarily (mixing HTML and logic).

JSP 1) How do I mix JSP and SSI #include?

If you're just including raw HTML, use the #include directive as usual inside your .jsp file. <!--#include file="data.inc"-->

Page 90 of 210

But it's a little trickier if you want the server to evaluate any JSP code that's inside the included file. Ronel Sumibcay (ronel@LIVESOFTWARE.COM) says: If your data.inc file contains jsp code you will have to use <%@ vinclude="data.inc" %> The <!--#include file="data.inc"--> is used for including non-JSP files. 2) How do I access a database from my servlet or JSP? import java.io.*; import javax.servlet.*; import javax.servlet.http.*; import java.sql.*; public final class YourClass extends HttpServlet { Connection con = null; public void init() throws ServletException { String url = getServletContext().getInitParameter("url"); String uid = getServletContext().getInitParameter("uid"); String pwd = getServletContext().getInitParameter("pwd"); try { //Register the JDBC driver Class.forName("oracle.jdbc.driver.OracleDriver"); } catch( Exception e ) { e.printStackTrace(); }//end catch //Get a connection to the database try { con = DriverManager.getConnection(url, uid, pwd); } catch( Exception e ) { e.printStackTrace(); }//end catch }//end init() public void destroy() { try { //Close the connection to the database con.close(); } catch( Exception e ) { Page 91 of 210

e.printStackTrace(); } } public void doGet(HttpServletRequest req, HttpServletResponse res) throws ServletException, IOException{ try { [...] Statement st = con.createStatement(); [ more JDBC code ] } catch (SQLException e) { [ ... ] } } 3) How can I implement a thread-safe JSP page? You can make your JSPs thread-safe by having them implement the SingleThreadModel interface. This is done by adding the directive <%@ page isThreadSafe="false" %> within your JSP page. With this, instead of a single instance of the servlet generated for your JSP page loaded in memory, you will have N instances of the servlet loaded and initialized, with the service method of each instance effectively synchronized. You can typically control the number of instances (N) that are instantiated for all servlets implementing SingleThreadModel through the admin screen for your JSP engine. 4) Can a JSP page process HTML FORM data? Yes. However, unlike servlets, you are not required to implement HTTPprotocol specific methods like doGet() or doPost() within your JSP page. You can obtain the data for the FORM input elements via the request implicit object within a scriptlet or expression as: <%

Page 92 of 210

String item = request.getParameter("item"); int howMany = new Integer(request.getParameter("units")) .intValue(); %> or <%= request.getParameter("item") %> 5) How does JSP handle run-time exceptions? You can use the errorPage attribute of the page directive to have uncaught run-time exceptions automatically forwarded to an error processing page. For example: <%@ page errorPage="error.jsp" %> redirects the browser to the JSP page error.jsp if an uncaught exception is encountered during request processing. Within error.jsp, if you indicate that it is an error-processing page, via the directive: <%@ page isErrorPage="true" %> the Throwable object describing the exception may be accessed within the error page via the exception implicit object. Note: You must always use a relative URL as the value for the errorPage attribute. 6) What JSP lifecycle methods can I override? You cannot override the _jspService() method within a JSP page. You can however, override the jspInit() and jspDestroy() methods within a JSP page. jspInit() can be useful for allocating resources like database connections, network connections, and so forth for the JSP page. It is good programming practice to free any allocated resources within jspDestroy(). 7) How can I override the jspInit() and jspDestroy() methods within a JSP page?

Page 93 of 210

The jspInit() and jspDestroy() methods are each executed just once during the lifecycle of a JSP page and are typically declared as JSP declarations: <%! public void jspInit() { ... } %> <%! public void jspDestroy() { ... } %> 8) How do I include static files within a JSP page? Static resources should always be included using the JSP include directive. This way, the inclusion is performed just once during the translation phase. The following example shows the syntax: <%@ include file="copyright.html" %> Do note that you should always supply a relative URL for the file attribute. Although you can also include static resources using the action, this is not advisable as the inclusion is then performed for each and every request.

9) How do I use comments within a JSP page? You can use "JSP-style" comments to selectively block out code while debugging or simply to comment your scriptlets. JSP comments are not visible at the client. For example: <%-- the scriptlet is now commented out <% out.println("Hello World"); %> --%>

Page 94 of 210

You can also use HTML-style comments anywhere within your JSP page. These comments are visible at the client. For example: <!-- (c)1999 jGuru.com --> Of course, you can also use comments supported by your JSP scripting language within your scriptlets. For example, assuming Java is the scripting language, you can have: <% //some comment /** yet another comment **/ %> 10) How do I perform browser redirection from a JSP page? You can use the response implicit object to redirect the browser to a different resource, as: response.sendRedirect("http://www.foo.com/path/error.html"); You can also physically alter the Location HTTP header attribute, as shown below: <% response.setStatus(HttpServletResponse.SC_MOVED_PERMANENTLY); String newLocn = "/newpath/index.html"; response.setHeader("Location",newLocn); %> 11) How do I prevent the output of my JSP or Servlet pages from being cached by the browser? You will need to set the appropriate HTTP header attributes to prevent the dynamic content output by the JSP page from being cached by the browser. Just execute the following scriptlet at the beginning of your JSP pages to prevent them from being cached at the browser. You need both the statements to take care of some of the older browser versions.

Page 95 of 210

<% response.setHeader("Cache-Control","no-cache"); //HTTP 1.1 response.setHeader("Pragma","no-cache"); //HTTP 1.0 response.setDateHeader ("Expires", 0); //prevents caching at the proxy server %> [Based on feedback (below), I have changed this scriptlet slightly. If the above fails, try changing the first line to response.setHeader("Cache-Control","no-store"); //HTTP 1.1 12) Is there a way to reference the "this" variable within a JSP page? Yes, there is. Under JSP 1.0, the page implicit object is equivalent to "this", and returns a reference to the servlet generated by the JSP page. 13) Can a JSP page instantiate a serialized bean? No problem! The useBean action specifies the beanName attribute, which can be used for indicating a serialized bean. For example: <jsp:useBean id="shop" type="shopping.CD" beanName="CD" /> <jsp:getProperty name="shop" property="album" /> A couple of important points to note. Although you would have to name your serialized file "filename.ser", you only indicate "filename" as the value for the beanName attribute. Also, you will have to place your serialized file within the WEBINF\jsp\beans directory for it to be located by the JSP engine. 14) How do I set a cookie within a JSP page? Setting cookies from within a JSP page is similar to the way they are done within servlets. For example, the following scriptlet sets a cookie "mycookie" at the client: <% Cookie mycookie = new Cookie("aName","aValue"); response.addCookie(mycookie); %>

Page 96 of 210

Typically, cookies are set at the beginning of a JSP page, as they are sent out as part of the HTTP headers. 15) How can I delete a cookie from within a JSP page? A cookie, mycookie, can be deleted using the following scriptlet: <% Cookie killMyCookie = new Cookie("mycookie", null); killMyCookie.setMaxAge(0); killMyCookie.setPath("/"); response.addCookie(killMyCookie); %> 16) Can I stop JSP execution while in the midst of processing a request? Yes. Preemptive termination of request processing on an error condition is a good way to maximize the throughput of a high-volume JSP engine. The trick (asuming Java is your scripting language) is to use the return statement when you want to terminate further processing. For example, consider: <% if (request.getParameter("foo") != null) { // generate some html or update bean property } else { /* output some error message or provide redirection back to the input form after creating a memento bean updated with the 'valid' form elements that were input. this bean can now be used by the previous form to initialize the input elements that were valid then, return from the body of the _jspService() method to terminate further processing */ return; } %> 17) How can I declare methods within my JSP page?

Page 97 of 210

You can declare methods for use within your JSP page as declarations. The methods can then be invoked within any other methods you declare, or within JSP scriptlets and expressions. Do note that you do not have direct access to any of the JSP implicit objects like request, response, session and so forth from within JSP methods. However, you should be able to pass any of the implicit JSP variables as parameters to the methods you declare. For example: <%! public String whereFrom(HttpServletRequest req) { HttpSession ses = req.getSession(); ... return req.getRemoteHost(); } %> <% out.print("Hi there, I see that you are coming in from "); %> <%= whereFrom(request) %> 18) How can I enable session tracking for JSP pages if the browser has disabled cookies? We know that session tracking uses cookies by default to associate a session identifier with a unique user. If the browser does not support cookies, or if cookies are disabled, you can still enable session tracking using URL rewriting. URL rewriting essentially includes the session ID within the link itself as a name/value pair. However, for this to be effective, you need to append the session ID for each and every link that is part of your servlet response. Adding the session ID to a link is greatly simplified by means of of a couple of methods: response.encodeURL() associates a session ID with a given URL, and if you are using redirection, response.encodeRedirectURL() can be used by giving the redirected URL as input. Both encodeURL() and encodeRedirectedURL() first determine whether cookies are supported by the browser; if so, the input URL is returned unchanged since the session ID will be persisted as a cookie.

Page 98 of 210

19) How can I get to print the stacktrace for an exception occuring within my JSP page? <%@ page isErrorPage="true" %> <% out.println("<pre>"); PrintWriter pw = response.getWriter(); exception.printStackTrace(pw); out.println("</pre>"); %> 20) How can my JSP page communicate with an EJB Session Bean? The following is a code snippet that demonstrates how a JSP page can interact with an EJB session bean: <%@ page import="javax.naming.*, javax.rmi.PortableRemoteObject, foo.AccountHome, foo.Account" %> <%! //declare a "global" reference to an instance of the home interface of the session bean AccountHome accHome=null; public void jspInit() { //obtain an instance of the home interface InitialContext cntxt = new InitialContext( ); Object ref= cntxt.lookup("java:comp/env/ejb/AccountEJB"); accHome = (AccountHome)PortableRemoteObject.narrow(ref,AccountHome.class); } %> <% //instantiate the session bean Account acct = accHome.create(); //invoke the remote methods acct.doWhatever(...); // etc etc... %> 21) How can I prevent the word "null" from appearing in my HTML input text fields when I populate them with a resultset that has null values? You could make a simple wrapper function, like

Page 99 of 210

<%! String blanknull(String s) { return (s == null) ? "" : s; } %> then use it inside your JSP form, like <input type="text" name="shoesize" value="<%=blanknull(shoesize)%>"> 22) What is the difference between JSP and PHP? PHP is an open-source page scripting/templating system that is very similar to JSP and ASP. It defines its own scripting language, which looks and feels a lot like Perl. JSP uses Java as its scripting language (although some implementations support JavaScript, such as Caucho). ASP uses VBScript. PHP is very popular -- it is used on over a million web sites -- but its main advantage (IMHO) seems to be that the language, being more "scripty" and Perl-like, is less intimidating to the great unwashed mass of HTML monkeys and hackers. In the long run, JSP and Java provide a more powerful system. Here is a list of reasons why JSP is better than PHP:

Anything you can do with PHP, you can do with JSP; the reverse is not true JSP is much more powerful, since it has access to all the Java libraries. PHP only has access to PHP libraries JSP is Object-Oriented, so leads to cleaner code that's easier to debug, maintain, and improve. (PHP also allows objects, but the object model is more primitive, and most scripted pages ignore PHP objects and just use normal variables.) The equivalent syntax in JSP is just as simple to learn, so you can get up and running just as quickly -- that is, there's no extra startup cost in using Java, at least not a significant one Java programmers (as opposed to 15-year-old hackers or HTML monkeys) appreciate the importance of a clean language with complex OO data structures and strong typing With JSP, if the code inside a page gets too big, or if you want to use it elsewhere, you can cut it out, make it into a Java class, and invoke it from anywhere in your application (even not from a page). With PHP, you're stuck inside the HTML box.

Page 100 of 210

JSP's concept of state management and persistence is more explicit and powerful than PHP's. With JSP, you can specify whether a variable persists for the page, the request, the session, or the application (or if it's just local to the function). The JSP engine automatically does the right thing with cookies so you have access to the variable on later requests. With PHP, you just have "global" and "not global", you don't have automatic session management, and have to do your state thing manually with cookies or hidden variables.

23) Are there any IDE's which will help me debug JSPs? IBM's Visual Age for Java (VAJ) IDE provides numerous features to aid in the debugging and incremental development of JSPs. VAJ Professional and Enterprise Editions come with the JSP Execution Monitor, which allows you to simultaneously view the JSP source, the generated servlet source as well as the dynamically generated HTML content.

24) Can I call a JSP, then have it return control to the original JSP, like a subroutine or method call? Yes. That is exactly the purpose served by the <jsp:include> action. The syntax of the include action is: <jsp:include page="relativeURL" flush="true" /> You can have the include action anywhere within your JSP page, and the relative URL specified for the page attribute may point to either a static (.html) or dynamic resource like a servlet or JSP. Since the include action is handled during the request processing phase, it makes sense to include only resources which generate some dynamic content. The included resource is also automatically forwarded the request and response objects of the invoking JSP page. For example, the action: <jsp:include page="/examples/jsp/copyright.jsp"flush="true"/> results in the output of copyright.jsp being included inline within the response of invoking JSP page. There is however a limitation. The included JSP or servlet resource cannot change the HTTP headers. For example, they cannot set cookies, since they are sent to the browser via the HTTP headers.

Page 101 of 210

25) What are the disadvantages of JSP? 1. As things stand, I believe that JSP can be effectively used only by someone with some degree of Java knowledge. Currently, Java programmers are a fairly expensive commodity. 2. Debugging JSP programs is still a major challenge.You have to remember that a jsp page will be first converted to a .java file and then compiled. Thus, any errors will be pointing to line numbers in the converted .java file and not the .jsp page.For example an error in the first line of .jsp page may be shown on the 20th line of the .java file. Tracing back can be somewhat tricky. (However, with the servlet engine Resin, the errors refer to the line within the .jsp page.) You can debug JSP pages using IDEs like VA Java and JDeveloper; but I think debugging JSP using an high-powered IDE would go against one of the basic tenets of JSP simplicity. 3. Database connectivity is not as easy as it should be. Most of the servlet engine vendors do not support connection pooling natively, as of this day. Consequently, one has to write a lot of custom code to do the job. 4. It is not an easy task to choose the appropriate servlet engine. There isn't a single organization which conducts independent benchmark testing on servlet engines. Individual vendors do provide benchmarks for their own products, but the figures usually refer to numbers and does not provide any indication on the stability of the engine. 5. There are numerous syntax related issues with JSP programming. 26) Can a JSP call itself recursively? Yes, a JSP can call itself recursively. For example, I use a web based interactive SQL query tool. This consists of a single JSP in which I do a SQL call at the top, display results and then get the next SQL query in a form. In the form's action, I specify the same JSP. There could be many other similar uses. 27) How can I use JSP to make sure a user has logged in before I handle the request?

Page 102 of 210

On every page that needs to be authenticated, check for a user ID in the session object - if it does not exit, redirect the user to a login page, passing the url the user was trying to access as a parameter. On the login page, if the user successfully logs in, create a session for him/her, and add their user ID to the session. After this, redirect back to the original page they had tried to access. This way, even if the user bookmarks a page, he/she will be asked to login once the session has become invalid. Some code: On every page add the following: HttpSession session = request.getSession(true); if (session.getValue("EID") == null) { response.sendRedirect (response.encodeRedirectUrl ("Login.jsp?Origin=janesonline.jsp")); } else { // the rest of the page ... } In Login.jsp once the user has provided the correct logon credentials: session.putValue("EID", EID); response.sendRedirect(response.encodeRedirectUrl(request.getParamete r("Origin"))); ... 28) How can I write to a text file from a JSP page? You can write to a text file using the PrintWriter object: <%@ page import="java.io.*" %> <% String str = "print me"; //always give the path from root. This way it almost always works. String nameOfTextFile = "/usr/anil/imp.txt"; try { PrintWriter pw = new PrintWriter(new FileOutputStream(nameOfTextFile)); pw.println(str); //clean up pw.close(); } catch(IOException e) { out.println(e.getMessage());

Page 103 of 210

} %> Now, open up imp.txt and voila, the text "print me" should be there in it. 29) How can I customize the HTML generated by my JSP file based upon what browser the user is using? <%@ page import="javax.servlet.*" %> <% String browserType = request.getHeader("User-Agent"); String browser = ""; if ((browserType.indexOf("MSIE") != -1) || (browserType.indexOf("msie") != -1)) { browser = "Explorer"; } else { browser = "Navigator"; } %> Your browser is <%= browser%><BR> 30) How do I setup a cookie to expire after a certain time? You can set the maximum age of a cookie with the setMaxAge(int seconds) method:

A positive value is the maximum number of seconds the cookie will live, before it expires A negative value means the cookie will not be stored beyond this browser session (deleted on browser close) Zero means to delete the cookie

31) What are the advantages of using beanName in the jsp:useBean syntax? The beanName tag uses Beans.instantiate() method to instantiate a bean. This method can instantiate a bean from either a class or a serialized template. The value of beanName can be either a fully qualified class name or an expression that evaluates to a fully qualified class name. This

Page 104 of 210

value is passed to Beans.instantiate() method which checks whether this is a class or a serialized template. In case of a serialized template, a class loader is called. The instantiated bean is then cast to the type specified by type attribute. 32) When we use <jsp:forward>, the URL in the browser's location/address area doesn't change to the page that is forwarded to. Is there any way to update this upon forwarding to a new location? The only way you can cause the browser to update the new URL in its location area is to use response.sendRedirect("newURL") 33) How can I convert my 0.9 JSP files to 1.1? JSP 0.9 <!--#INCLUDE FILE="include/stdhdr.inc"--> <%@ import="javax.servlet.http.*" %> <%@ import="java.util.*" %> <%@ import="java.net.*" %> <%@ import="java.io.*" %> <SCRIPT runat="server"> interface Verbosity { final int TERSE = 1; final int NORMAL = 2; final int VERBOSE = 3; } </SCRIPT> JSP 1.1 <%@ include file="include/stdhdr.inc" %> <%@ page import=" javax.servlet.http.*, java.util.*, java.net.*, java.io.*, "%> <%! interface Verbosity { final int TERSE = 1; final int NORMAL = 2; final int VERBOSE = 3; } %>

34) How can I determine the name and version number of the servlet or JSP engine that I am using? From within a servlet, you can invoke the ServletContext.getServerInfo() method as follows: String thisServer= getServletConfig().getServletContext().getServerInfo(); If you are using JSP, you can use this expression: <%= application.getServerInfo() %> Page 105 of 210

35) What are all the implicit objects available within a JSP page? The eight implicit variables available within JSP pages are:

request: This represents the request triggering the service invocation and encapsulates the HttpRequest object; has request scope. response: Represents the response to the request and encapsulates the HttpResponse object. Not used often by page authors; has page scope. pagecontext: Encapsulates implementation-dependent features as a PageContext; has page scope. application: Represents the ServletContext obtained from servlet configuration object; has application scope. out: This is an instance of JspWriter that writes into the output stream; has page scope. config: Represents the ServletConfig object for the JSP; has page scope. page: This acts as a synonym for the this operator. Not used often by page authors and has page scope. exception: This represents the uncaught Throwable object that resulted in the error page being invoked. By default, has page scope.

36) How can I refresh the page my browser is showing with JSP? <html> <META HTTP-EQUIV="Refresh" CONTENT="3"> <body> <% int i=0; String ii = (String) session.getValue("count"); if (ii!=null) { i = Integer.parseInt(ii); out.println("<h1>Counter is: "+i+"<h1>" ); i++; } session.putValue("count",new Integer(i).toString()); %> </body> </html>

Page 106 of 210

37) Can a JSP be multi-threaded? By default, the service() methods of all JSP pages execute in a multithreaded fashion. Each client request is dispatched in a concurrent manner within a separate thread by the servlet engine. Thus, it is important to synchronize access to any page shared state in the default scenario. You can make a page "thread-safe" and have it serve client requests in a single-threaded fashion by setting the page tag's isThreadSafe attribute to false: <%@ page isThreadSafe="false" %> This causes the generated servlet to implement the SingleThreadModel interface. 38) How does the "session" scope work with the useBean tag? What is the difference between "session" and "application" for the useBean tag? When you request a bean from the session scope or the application scope, and such a bean already exists, the reference to the existing bean is returned, and a new bean is not instantiated; otherwise, the bean is newly instantiated, placed into the specified scope, and the reference is returned. The session scope is different then the application scope in that an application bean is kept around until the servlet/jsp container is restarted, while session beans time out after a specified amount of inactivity or if the session is invalidated for any reason. Also, beans with session scope are available only to a single client which participates in the session; beans with application scope have "global" visibility and are available to all JSPs and servlets which are part of the application. 39) How do I get a JSP page to implement a Java interface? A JSP page can't directly implement an interface. If you really need to do this you'll have to define a superclass for your page which implements the interface. If you declare this superclass to be abstract you can defer the implementation of the interface to the JSP page. This superclass will have to implement the interfaces HttpJspPage and Servlet too, otherwise you will get a compilation error from the JSP compiler.

Page 107 of 210

40) What is the recommended, "best" architecture for JSP applications? There really is no "best" architecture. It depends on: 1. The size and scope of the application. 2. The amount of resources (human and monetary) available to develop the application. 3. Time available to develop the application. For a relatively small application which requires simple database access, a three-tier model using JSP, JavaBeans, and JDBC is all that you need. The JavaBeans would contain methods to access the data via JDBC. The JSP pages would embed the JavaBeans in the page using the <jsp:useBean> tag. If the use of the application grows, you can always add database pooling and other optimizations to scale the architecture without redesigning everything. If your application is going to be large scale - an online e-commerce site for instance, you would want to invest in a more scalable solution. I would recommend a "n-tier" solution using JSP, (standard) JavaBeans, and Enterprise JavaBeans. JSP would provide the client interface. One or more JavaBeans would sit between the JSP pages and the EJB container. The JavaBeans would be embedded in your JSP pages using the <jsp:useBean> tag. The JavaBeans would utilize session beans to perform transactions and access data on entity beans. This architecture is both distributed and scaleable. It supports transactions and all the benefits an application server has to offer (database pooling, clustering, etc). Never throw JDBC code or EJB code directly on your JSP page. This leads to clutter which most web designers (the people who have to work with on the page) would probably not understand and would rather not look at. Not to mention it quickly becomes a maintenance nightmare. 41) How do I pass session information from a JSP to a Applet. Can I pass them as parameters or can I talk back from an Applet to the JSP page?

Page 108 of 210

The easiest way to pass session info is through the applet parameters. The following example code uses some scriptlet tags to set the parameters of the applet. <applet code="foo.class" width="100" height="100"> <% for (x = 0; x < session.fooData.getCount(); x++) { %> <param name="<%= session.fooData.getName(x) %>" value="<%= session.fooData.getValue(x) %>"> <% } %> </applet> 42) What is the best way of implementing a web application that uses JSP, servlet and EJB technologies all together following a Model View Controller (MVC) architecture? [See the Sun J2EE Blueprints for "an integrated set of documentation and examples that describe and illustrate 'best practices' for developing and deploying component-based enterprise applications using the J2EE platform" including some good architecture whitepapers and source code. -Alex] Hmm, 'Best Way' is a bit rough - there are several 'good' ways, and the usual set of trade-offs between them. (I'm a consultant - I have to start any answer with "It depends...", otherwise they revoke my whiteboard privileges) The main thing you need to keep in mind as you design this sort of a system is that you want the interface into the EJB's to be rather narrow: in any flow, the ideal is to call one EJB method (hopefully on a stateless session bean), and let it make calls to entities on your behalf, then hand back the data you need to display. How you display it depends: you can either embed beans on your JSPs and let the beans make that hopefully-one EJB call, or you can post to a servlet, let that make the call, then forward to the JSP for display. The second of these is more flexible and gives you more leverage to hide, change, and enforce your site's structure. The first, however, will be easier for developers new to this web thing to follow. Essentially, I'm saying that Entity beans are your model, your controller is Session beans (maybe with a bit of help from servlets or beans), and your JSPs, beans and servlets are your View.

Page 109 of 210

One thing to note here: this discussion strongly implies that your EJBs are capable of externalizing their state as some number of very simple 'value objects' (not EJBs themselves, just something we can pass back and forth). These value objects are probably tuned tightly to a workflow, and will be produced by that session bean. This way the traffic between the EJB (server) and the JSP/Servlet (client) is tuned to what the client needs, while the transaction load on the server is minimized. 43) Is it an acceptable practice to use response.sendRedirect() in a JSP page? Or should you just throw an exception and use the error page directive? The response.sendRedirect() will direct the browser to go to a new page/url. The new url will appear in the 'location' at the top of the browser page. You must specifiy a full URL like http://www.bob.com/start.html. Using this requires a round trip to the server with all the attendant delays. A pageContext.forward() will "jump" to the url specified which may be a relative url like "other.jsp" to indicate it is in the same base location as the current page. The browser location box will show the URL of the original page, not the one you redirected to. There is no additional trip back to the browser and then back to the server so time is kept to a minimum. When using pageContext.forward(), this forwards the original request and response objects. If you need to change one of the attributes in the original request object, there is no function to do this but this can be reset by passing new querystrings in the URL given to forward. An errorpage directive just puts a big "try {.. } catch (Throwable x) {..}" around the Java for the whole jsp page (including each of the out.print() lines that handle the HTML portion of the jsp page) If an exception is "caught", things are redirected (as in pageContext.redirect() above) to the error page. If you put the "isError" directive on the error page you get a few predefined jsp variables that tell you what the exception is that triggered the jump to the page. 44) What is the difference between ServletContext and PageContext? The ServletContext gives information about the container in which the servlet (or JSP) is running in. Parameters for this can be setup in the web application deployment descriptor and there is one ServletContext per web application.

Page 110 of 210

The PageContext gives the servlet (or JSP) information about the request that it is currently handling and contains information about the request and any parameters, the session, the response object, a reference to the output stream and also a reference to the web application's ServletContext. 45) If "yy.jsp" includes "xx.jsp" and then I modify "xx.jsp" and try to execute "yy.jsp", does the JSP engine recognize "xx.jsp" as being modified? If it detects modification, does it automatically recompile xx.jsp ? Yes...if you are using the <jsp:include> tag and not the include directive <%@ include %>, xx.jsp will be recompiled automatically if it changes. You may also want to generate the appropriate META tags within yy.jsp so that it is not cached by either your browser or the proxy server.

46) How can I protect my JSP pages (or servlets) against the user's using the browser's back arrow and losing the session? This question is rather puzzling. Unless you're using URL-rewriting, you can't "lose" a session as it is maintained by cookies. If you think about displaying content which might already have become invalid, you can use HTTP-headers for manipulating content life-time. (See FAQs on preventing caching.) 47) Is there any difference between the attributes class=com.myco.MyClass and the beanName=com.myco.MyClass attributes in the <jsp:useBean> tag? Yes, there is some difference. class=com.myco.MyClass instantaites a bean from a class using the new keyword, thus invoking the class' public no-arg constructor as: new com.myco.MyClass() beanName=com.myco.MyClass When you use beanName, the bean is instantiated via the java.beans.Beans.instantiate method. This method can also instatiate

Page 111 of 210

serialized forms of a class which may or may not have a public no-arg constructor. 48) What does the attribute flush=true in <jsp:include page="abc.jsp" flush="true"/> mean? Where is it essential to use? From the JSP 1.1 Specs: "flush: Mandatory boolean attribute. If the value is 'true', the buffer is flushed. A 'false' value is not valid in JSP 1.1." [Emphasis added] Unluckily there's no statement about the "why". 49) What is the best way to do session and application initialization in a JSP page? You can initialize the session and application using the HttpSession.putValue() and ServletContext.setAttribute() methods in a JSP page. The current HttpSession (session) and ServletContext (application) objects are made available implicitely to a JSP page as "session" and "application" objects. As a best practise you should initialize these objects as part of postprocessing in your JSP page or Servlet. 50) How do I include a link to an external style sheet from JSP? You would include the link the same way you would for a static HTML page: <LINK rel="stylesheet" type="text/css" href="/site_style.css"> where /site_style.css is located at the root of your web server. 51) Is there any way to convert "Post" request to "Get" request dynamically in case of JSP, as there is only service method? According to the JSP 1.1 spec when a JSP gets compiled it will generate the _jspService() method to handle the request. There is no mechanism

Page 112 of 210

available to provide your own _jspService() method, although you can specify the class the generated servlet class needs to extend. When you specify a base class using the <% page extends %> directive you need to comply by some rules. One of them being, the service() method of your base class should call the _jspService() method. Refer to section 3.2 of the JSP 1.1 specificaition for a detailed example. Lastly, if you decide not to use your own base class, the generated _jspService() method will handle both GET and POST methods. What I mean is that if you have a JSP page, you can request it from the address bar(GET) or post to it from a FORM. As long as you use the HttpServletRequest.getParameter(s)() methods you can get access to the parameters. 52) How do I pass values from a list box (with multiple selects) to a Java Bean? Consider the following HTML, which basically allows the user to select multiple values by means of a checkbox: <html> <body> What's your favorite movie? <form method=post action=Movies.jsp> <input type=checkbox name=faveMovies value="2001: A Space Odyssey"> 2001: A Space Odyssey <input type=checkbox name=faveMovies value="The Waterboy"> The Waterboy <input type=checkbox name=faveMovies value="The Tin Drum"> The Tin Drum <input type=checkbox name=faveMovies value="Being John Malkovich"> Being John Malkovich

Page 113 of 210

<input type=submit> </form> </body> </html> To handle HTML elements like checkboxes and lists which can be used to select multiple values, you need to use a bean with indexed properties (arrays). The following bean can be used to store the data selected from the above check box, since it contains an indexed property movies: package foo; public class MovieBean { private String[] movies; public MovieBean() { String movies[] = new String[0]; } public String[] getMovies() { return movies; } public void setMovies(String[] m) { this.movies = m; } } Although a good design pattern would be to have the names of the bean properties match those of the HTML input form elements, it need not always be the case, as indicated within this example. The JSP code to process the posted form data is as follows: <html> <body> <%! String[] movies; %> <jsp:useBean id="movieBean" class="foo.MovieBean"> <jsp:setProperty name="movieBean" property="movies" param="faveMovies" /> </jsp:useBean>

Page 114 of 210

<% movies = movieBean.getMovies(); if (movies != null) { out.println("You selected: <br>"); out.println("<ul>"); for (int i = 0; i < movies.length; i++) { out.println ("<li>"+movies[i]+"</li>"); } out.println("</ul>"); } else out.println ("Don't you watch any movies?!"); %> </body> </html> 53) What is the best way to send parameters to servlets when using the jsp:include statement to embed the servlet output inside of a JSP page? The best way to send parameters using the <jsp:include> action is with the <jsp:param> tag. This would look something like: <jsp:include page="servletName" ...> <jsp:param name="paramName" value="paramValue"> <jsp:include /> Now, the included servlet can access these parameters the same way it accesses all other parameters: getParameter(String name). 54) Can I create an inner class within my JSP file? If yes, can it be dynamically reloaded when changed like the rest of the JSP? Yes, you can declare inner classes within your JSP pages using declarations. The inner classes are also dynamically reloaded by your servlet engine's classloader if they change. Consider the following example: <html> <body> <%! class Herge { private String haddockSays=""; public Herge() { haddockSays="Billions of blistering Bashi-bazouks!";

Page 115 of 210

} public String getHaddockSays() { return haddockSays; } } %> <% Herge captain = new Herge(); %> <h1> <%= captain.getHaddockSays() %> </h1> </body> </html> After the page has been compiled, if you decide to have Cap'n Haddock swear something else, the inner class Herge will be reloaded, and the JSP page will be recompiled. 54) What are custom tags useful for ? Lots of things :) One of the interesting uses for custom tags is empowering web site designers who don't know Java (poor things). A simple custom tag can be used to change 'complex' code like: Current Date is: <%=new Date()%> to Current Date is: <mytag:currentdate/> Even though the reduction in complexity is small (some might say none) the use of a tag encapsulates the code, so more sophisticated stuff can be implemented later without changes in the JSP. Internationalised dates, graphical animating dates, etc. More complex code can include iteration over collections: <mytag:getusers id="users"/> <mytag:iterate overwhat="users" id="currentuser"> <mytag:displayuser id="currentuser"/> </mytag:iterate> database access:

Page 116 of 210

<mytag:dbgetusers db="UserDB" username="jsp" password="jsp" id="users"/> <mytag:iterate overwhat="users" id="currentuser"> <mytag:displayuser id="currentuser"/> </mytag:iterate> (With some coding effort the tags can be made similar) One can say that just about any Java code can be put into a custom tag although this soon hits a brick wall as custom tags require more coding than simple 'script like' Java. See: Which is better, Custom tags or JavaBeans ? There are some applications of custom tags that have no alternative in JSP. One such application is post-processing of JSP generated output. Say we had an page that needed to contain a word count, this couldn't be implemented in JSP because once some text has been put into the JSPWriter you can't access it anymore. It is possible when using custom tags in the following way: <mytag:getwordcount placeholder="$WordCount$"> Blah blah blah ($WordCount$ Words) </mytag:getwordcount> then in the code for getwordcount: public class WordCountTag extends BodyTagSupport { private String m_placeholder; public int doStartTag() throws JspTagException { return EVAL_BODY_TAG; } public int doAfterBody() throws JspTagException { try { if (bodyContent != null) { String text = bodyContent.getString(); int wordCount = calculateWordCount(text); String newText = replacePlaceholder(text, wordCount); bodyContent.getEnclosingWriter().print(newText); } } catch (IOException ie) {}

Page 117 of 210

return EVAL_PAGE; } public int doEndTag() throws JspTagException { return EVAL_PAGE; } private int calculateWordCount(String text) { //... } private String replacePlaceholder(String input, int wordCount) { //... } } The great thing about using custom tags for post processing is that it requires minimal or no changes to the JSP, if you were implementing last minute changes to Wahoo! to ensure that the text 'Cost = 0$' never appears it would be trivial to do so: <mytags:nofreebies> rest of web page </mytags:nofreebies> Or even better: <mytags:postprocessing processingSequence="someExternalResource"> rest of web page </mytags:postprocessing> ... someExternalResource: com.wahoo.jsp.processing.NoSwearing com.wahoo.jsp.processing.NoFreebies A bad thing about custom tags is that they don't seem to have an equal footing to standard jsp tags, so you can't have a <jsp:include ... > tag

Page 118 of 210

within a custom tag (custom tags cannot call out.flush, and jsp:include requires flush="true"), but hopefully this will change with JSP 1.2 55) What is the exact difference between request.getRequestURI() and request.getServletPath()? request.getRequestURI() contains the context path defined in your server.xml, on the other hand, request.getServletPath() does not contain this path. For example, in your server.xml, you define: <Context path="/mywebapp" docBase="D:\work\mywebapp" debug="0" reloadable="true" /> ; under the directory d:\work\mywebapp, you have sub directory WEB-INF and jsps, under the directory d:\work\mywebapp\jsps, you save your jsp file, say mytest.jsp. So when you use request.getRequestURI(), the result will be: /mywebapp/jsps/mytest.jsp, the other result using request.getServletPath() will be /jsps/mytest.jsp. 56) Is there a way to set up the unlimited buffering for a JSP page? No. You can either disable the buffer mode or set the maximum size of the buffer. But you cannot set the size to unlimited. To disable the buffer use <%@ page buffer="none"%> To set the size to a specified size say 20kb use <%@page buffer="20kb"%> The default size is 8kb, which is sufficient in most cases. 57) What is the difference between response.sendRedirect(), RequestDispatcher.forward(), and PageContext.forward()? In a nutshell, RequestDispatcher.forward() works on the server and response.sendRedirect() works on the browser. When you invoke RequestDispatcher.forward(), the servlet engine transfers control of this HTTP request internally from your current servlet or JSP to another servlet or JSP or static file. When you invoke response.sendRedirect(), this sends an HTTP response to the browser to make another request at a different URL.

Page 119 of 210

RequestDispatcher.forward() and PageContext.forward() are effectively the same. PageContext.forward is a helper method that calls the RequestDispatcher method. 58) Is there any way to get the Last Modified date of a JSP source file from that file? I want my JSP to have a display of the last modification automatically. There's nothing in the JSP spec (unfortunately) to get the last modified date, but you can use the servlet context object and the File API to get it. <%@ page import="java.io.*,java.util.*" %> <% String filename = application.getRealPath(request.getRequestURI()); File file = new File(filename); %> <%=new Date(file.lastModified())%> 59) What is the most elegant approach to inform a user that his session has timed out? I think best way is to tell them just that - your session has expired. Maybe not in that technical of a manner, but let them know that because of the dynamic nature of your application, information expires over an extended period of time. Then, recover as much state as you can and redirect them to a page where they can start their process over again. 60) What's the difference between the class and type attributes in the <jsp:useBean> tag. The "class" attribute specifies the actual implementaion class for this bean. "type" (if specified), specifies the superClass or the interface this class implements. If this is not defined, by default the type is same as the implementation class itself. This could be useful for typecasting of the object in the jsp page. 61) Why am I getting the error "Attempt to clear a buffer that is already been flushed"?

Page 120 of 210

This is related to the buffer overflow error. To solve this error, you can just set the page directive parameter autoflush to true or increase the buffer size by setting the buffer parameter. By default the buffer size is 8K, and all the HTML output is stored in this buffer before JSPWriter flushes it to the output. If the content size exceeds this default size, then there will be an exception, like the one you are getting. If the value of "autoflush" parameter is true, then whenever the buffer is full then the contents of this buffer will be automatically flushed. 62) What are the multithreading and clustering issues when it comes to using beans with jsp's in differrent scopes? With respective to multithreading, beans that are created with a request or page scope are new instances for each JSP call so these beans need not be thread safe. Beans that are created with a session or application scope must be thread safe as multiple pages could be accessing the same bean at once. In either case, if beans are accessing shared resources (like pooling connections behind the scene), you must make sure this sharing is thread-safe Clustering has similar issues as multithreading. Again, request and page scope beans are generally fine as they're created with each page request, but session and application will be shared instances. The clustering package you are using will often give you the ability to use the same session or application object across clustered servers, and this is either handled by keeping the objects in a shared ATOMic location (like a database) or each clustered server accessing the single instance of the objects via RMI. 63) How can I pass parameters dynamically to an applet from within a JSP page? You can pass parameters to applets by using <param> tags in between your <applet> tag. Here is some sample code: <applet class="MyApplet" height="50" width="50"> <param name="specialparam" value="<%=jspvariable%>" > <applet> 64) Can a JSP page be "spidered" and indexed by a search engine?

Page 121 of 210

It can, usually. Anything that can be called and is not excluded is available for spiders. Whether the results of the call are usefull is something else. If the JSP needs information that is passed as parameters or in a cookie, the spider will usually have no clue about what to do with it (and thus might well get an HTTP 500 error as the only output). 65) How does session management work internally within the servlet engine? This very much depends on the servlet engine. Sometimes sessions are stored only in memory, in a HashSet of session IDs and the HttpSession. Some servlet engines support serializing session information to a file system or database, which allows the servlet engine to restart without losing session information, and to allow a cluster of web servers to use the same pool of sessions. Each servlet engine should provide details of the features of their session management. If you want to look at actual implementations, there are numerous open source projects including Tomcat (http://jakarta.apache.org/), Apache JServ (http://java.apache.org/), and others. 66) Is it possible to publish the output of a JSP page to a static HTML file? 1. You can access the JSP page programatically using a URLConnection, by simulating a browser connection. URL url = new URL("http://www.jguru.com/"); URLConnection con = url.openConnection(); InputStream in = con.getInputStream(); OutputStream out = new FileOutputStream("mypage.html"); int c = -1; while((c = in.read()) != -1) { out.write(c); } 2. A much more involved approach is to use a wrapper around ServletResponse, similar to the class javax.servlet.ServletResponseWrapper in the Servlet 2.3 API (Tomcat 4.0). Then you can override the getOutputStream() and getWriter() methods to provide your own stream. MyServletResponseWrapper wrapper = new MyServletResponseWrapper(servletResponse); RequestDispatcher disp = getServletContext().getRequestDispatcher("/pages/mypage.jsp"); Page 122 of 210

disp.forward(servletRequest, wrapper); By extending the wrapper concept to provide your own ServletOutputStream, you could simultaneously provide the JSP output to both the client (browser) and to your own stream.

67) I would like to learn a technique to keep track the number of login attempts by a user using session variables. If the user exceed the maximum login attempts, then the account is suspended. This is pretty easy to accomplish by simply storing an Integer object in the HttpSession object. Here's some sample code for the login processing code... <% String username = request.getParameter("username"); String password = request.getParameter("password"); if (loginValid(username, password)) { //Continue with a successful login return; } else { //Check whether we've exceed the count and possibly update Integer counter = (Integer)session.getAttribute("invalid_login_counter"); if (counter == null) { counter = new Integer(1); } else if (counter.intValue() > 3) { //Block the account return; } else { counter = new Integer(counter.intValue() + 1); } session.setAttribute("invalid_login_counter", counter); } %> 68) Can I remove a bean from a session in JSP when the bean was set up using the <jsp:useBean ... scope="session"/> tag?

Page 123 of 210

Yes. <jsp:useBean id="bean" class="com.mypackage.MyBean" scope="session" /> basically translates into: <% MyBean bean = (MyBean)session.getAttribute("bean"); if (bean == null) { bean = new MyBean(); session.setAttribute("bean",bean); } %> So, you can remove it using the same sort of semantics: <% session.removeAttribute("bean"); %> 69) Is there anything which a servlet can perform but a JSP cannot and vice versa ? A JSP is generated into a servlet, so there is very little that one can do, but not the other. JSPs are generally considered a "convenient" way to write servlets. However, there are the following differences:

JSP cannot return binary data. This is because a JSP always calls response.getWriter(), and returns a JspWriter. Servlets cannot readily use JSP Tags. This is somewhat obviously, but custom tags can sometime include business logic or other functionality that a page developer would want to call. It technically is possible for a servlet to call a custom tag, but it is lengthy process.

70) Are there any standards for developing JSP pages? All I can find are Java coding standards, which does not help me much when it comes to JSP programming. JSP Architectures: Model I: This kind of architecture is useful when everybody on your team are able to write Java code as well as HTML code.You can have Java code generate/fetch the dynamic content and have HTML display them from within the same JSP page. This is a simple technique, but you may lose code readability and these pages may also be difficult to debug. Model II: Here, you have a servlet or JSP to generate/fetch the dynamic content and a separate JSP to display it. This way, the controller Servlet/JSP can forward the contents to the appropriate display JSP. This technique, commonly known as

Page 124 of 210

the Model/View/Controller (MVC) pattern, allows an effective separation of presentation from content. 71) How do I eliminate the spaces in the query string in a servlet /jsp combo like I would replace them with %20 ? Use the java.net.URLEncoder.encode() method as follows: String temp1 = request.getParameter("something"); temp1=java.net.URLEncoder.encode(temp1); The temp1 string will have it's spaces replaced with %20. Please note that all other special characters will be URLEncoded as well. 72) In a web application is Hashtable access faster or better than database access? Some developers I work with are arguing that the hashtables are faster when compared to getting data directly from the database. The size of the database is 3mb right now. If the hashtables do give a faster access time, is there any reason we should or shouldn't use them? Hashtable (or Maps) is faster than a database access. Sometimes it's better to use hastable instead of db, sometimes not: it depends on what you have to do with the data. Hashtable (and Maps) is faster than a database because the data are already loaded in memory, and generally in a way to get it as faster as possible (hash functions etc.). When getting data from the db, commonly you are passing thru a network connection, then to a file system, and at last to (flat)memory. Disadvantages of maps are that them charge lot of memory (more than just data size): you cannot use map with huge structures if you don't want to keep it all in memory. Databases let you to keep in memory only a subset of the entire application data. Furthermore, Hashtables (and Maps) don't provide a persistent storage: when you turn off the machine all the data are lost! Hashtable are not transactional, Hashtable are not relational, don't provide any data-constraints... in short, Hashtables and Maps are different from databases. For keeping temporary data in an application and for keeping fast access data, Maps (and Hashtables) are the right choice. For keeping businness/persistent/structured data, databases are right!

Page 125 of 210

Maps are right for keep application configuration (Properties), for keeping little tables (like a subset cities, states, etc.) that are used very frequently and changed rarely. And so on... 73) What is the difference between the server side include (SSI) and JSP include? Theoretically they are very similar. The purpose of both is to include a page or a document inside the actual page, before sending the page back to the client. Both works on the server. Said so, the obvious difference is the technology behind the two different solutions. The basic SSI implementation (that is normally part of a web server) it's definitely less powerful of a jsp include. The SSI has only access to the same request object of the page that contains it, while with jsp include you can use the same request or even add more information. 74) Assume that the web server creates a new session for a user, and later, the user does not "log out", but rather just closes the browser. How can the web server determine that this session is no longer active and prevent it from consuming valuable server resources?

There is no "standard" way to have a count of all the "active" sessions in a servet container. You have top maintain your own, maybe using a map that stores the session when the user logs in and remove it when the user logs out. If the user doesn't log out properly, you can check if the session is still valid based on computing the time difference between the default timeout interval (HttpSession.getMaxInactiveInterval()) and the last activity performed by the user (HttpSession.getLastAccessedTime()). 75) How can I access JSP variables from a JavaScript function in a JSP page?

Essentially, you can't. The JSP variable doesn't exist when the JavaScript is running as JSP runs in the server and JavaScript runs in the browser. Some servers though support server-side JavaScript. Read the FAQ for pointers on those. Perhaps there is some way to do this. 1. If you only want to use the variable value once , you can embed the jsp tag inside your JavaScript segment such as: <script language="JavaScript" >

Page 126 of 210

var myvar; myvar=<% =jspvar; %> ..... </script> 76) I have a field defined as a Text field. The field contains line breaks in it. I am printing this field to the screen and would like to replace the line breaks with HTML BR tags. Could someone help me with the code for this? public String replaceString(String str, String sep, String rep) { StringBuffer retVal = new StringBuffer(); int idx = 0; int jdx = str.indexOf(sep); while (jdx >= 0) { retVal.append(str.substring(idx, jdx)); retVal.append(rep); idx = jdx + sep.length(); jdx = str.indexOf(sep, idx); } retVal.append(str.substring(idx)); return retVal.toString(); } When you call it you can do something like: String changed = replaceString(original, "original_string", "replace_string"); 77) Can you tell me how to validate credit card numbers using JSP? Two points:

A JSP should not do this sort of validation. The JSP should handle presentation only; business logic (such as credit card validation) should be in separate classes, for example, in EJB. While no one can stop you from mixing presentation and business logic, doing so will give you confusing and difficult-to-maintain code. Validation of credit cards involves multiple steps. The first is checking to see that the credit card number is allowed under card numbering rules (e.g., MasterCard numbers start with the numeral "5"); the second step requires connecting to a processor (e.g., CyberCash) who will connect to cardholder banks to determine that (a) the card exists and is active, and (b) that there are sufficient funds available for the purchase. The processor may also perform some fraud checks. Given the complexity of

Page 127 of 210

card processing and your limited experience in this area, I would suggest that you look for a commercial service to connect with. 78) How can I get details regarding a browser (make, version, platform, etc.) from within a JSP page? You can retrieve any HTTP header information (including User-Agent) through the request object. The following scriptlet should return browser information: <%=request.getHeader("User-Agent") %> 79) How do I restrict an user from exceeding data of a particular length in a TEXTAREA like we do with a text box using the maxlength attribute? The text area doesn't have an attribute like maxlength, so there are two ways to check this: a client side and a server side. The first one (client side check) has to be written with a language like JavaScript. It's a simple check that doesn't allow to submit the form if the size of the field is greater than your max. The second solution (server side) is written in the language you're using (probably java) and it does the same thing, but after the form has been submitted. Good programming practice should suggest you to do both. This will avoid an invalid submission (save time and resources) and because if the client doesn't have JavaScript (rare situation) or has Javascript disabled (it happens often), it will work anyway. 80) Inside a JSP, how to represent private methods and call them? Use a declaration scriptlet: <%! private void foo() { System.out.println("foo"); } %> <% foo(); Page 128 of 210

%> 81) What is Struts? What is Struts? Struts is an open source framework from Apache for developing JSPbased web applications using the Model-View-Controller (MVC) [Model 2] architecture. 82) What is Ant? Do I need it to run Tomcat? ANT is a Java build tool. As they say in the website it is kind of like make without make's wrinkles. I strongly suggest you to take a look at the site if you're interested in knowing more about it. The short answer is no, you don't need to download ANT in order to run Tomcat Servlet COntainer. The long answer is "depends". If you download the binary version of Tomcat, than you don't need ANT. But if you prefer to download the source code, and you want to compile it by yourself, you need ANT. 83) Can I submit multiple forms, say form1 and form2, to a JSP page by clicking a single submit button? The simple answer is, combine the forms. This is the simplest solution to your problem. Basically, it is not possible to do what you are trying to do. By submitting form1 you are sending a request to the server. By submitting form2 you are also sending a request to the server. Both request need a response, but how is the server to know that it should combine responses? You could use frames and simultaneously post multiple forms from different framesets, with each response going into the appropriate frame using some Javascript magic. However, I highly recommend that if your forms need to work together (as is obviously the case here, since you are sending them at the same time) combine them into a single one. 84) How can I prevent user from viewing a page that he already passed. i.e I have a form that contains some textboxes to fill some info..after submited the form it will redirect to another page. I need to prevent user to view the page again by pressing back botton.

Page 129 of 210

We can accomplish this with using both jsp and JavaScript. form.jsp: <%response.setHeader("Cache-Control","no-cache");%> <%response.setHeader("expires","0");%> <%response.setHeader("Pragma","no-cache");%> <script language="JavaScript"> var prevpage = "<%=session.getValue("prevpage")%>"; if (prevpage=="result.jsp") { window.open("redirectpage.jsp","_parent"); } </script> <% session.putValue("prevpage","confirm");//reset the variable %> result.jsp: Set the prevpage variable in this page. <% session.putValue("prevpage","result.jsp"); %> When first time form.jsp loads, it will check for the prevpage variable. Since the prevpage is not set it displays the form.jsp page. Then we submit this page to result.jsp If we hit back button from result.jsp, we will be redirected to redirectpage.jsp. 85) Why do I get the error "IllegalStateException" when using the RequestDispatcher? When you use RequestDispatcher.forward or RequestDispatcher.include to call another servlet, you must pay very close attention to a fairly tricky detail of the servlet "chain of command." When a servlet is first called, the response object is fresh and new: its headers have not been set, its buffers are empty, and no data has been written to the client. However, as soon as either the status code or any of the headers have been written -- or potentially written -- to the client, or when data has been -- or may have been -- written to the body stream, then you may be susceptible to the IllegalStateException error. The problem that this exception is signalling is the new data that you are (or may be) writing is inconsistent with the data that's already been set and then irretrivably sent ("committed") to the client. Two common variants of this exception are "java.lang.IllegalStateException: Header already sent" and "java.lang.IllegalStateException: Cannot forward as Output Stream or Writer has already been obtained".

Page 130 of 210

"Header already sent" means that one or more headers have been committed to the client, so you can't set that header again. "Output Stream or Writer has already been obtained" means that since the calling servlet has already called response.getWriter() or response.getOutputStream(), that contaminates the data stream, since the response has been (or may have been) written to already, making it unsuitable for forwarding. (Some would argue that the exception is overkill; that the Servlet API should just silently log the problem, then continue as best it can, e.g. by simply not writing the new headers or status code or body text. However, the API as it stands is less forgiving, and it throws a hard exception.) A further complication is "side effects", where methods set the "committed" flag unnecessarily, or at least unexpectedly. For instance, calling response.flushBuffer() sets the "committed" flag (even if the buffer is empty). Furthermore, calling RequestDispatcher.include() calls response.flushBuffer() (even if the "included" servlet doesn't actually write any data to the response). That means that you shouldn't ever call include() before calling forward(). This is due to the semantics of RequestDispatcher.forward() -- it's intended to be called only by servlets that do literally nothing to the response before forwarding (since the "forwardee" is supposed to be the master servlet). Unfortunately, this means that you can't do things that you might naturally expect, like forwarding from one servlet or JSP to another, where each one adds a little bit of data to the response. Also unfortunately, there are some scenarios where you *can* do exactly that, so when you encounter a scenario where the exception is thrown, it seems to come from out of the blue. What this all means is that the Servlet API is inadequate as a general framework for sending messages among active objects to form a data pipeline. Fortunately, you have an API that is perfectly adequate for that task: Java itself. Structure your application to use JavaBeans and Java method calls. Restrict your Servlets to two types: one type is all dataprocessing, and the other type is all response-writing. If you want your response-writers to be modular (one object to build the nav bar, one object to build the banner ad, one object to build the body, one object to build the page footer, etc.), you have two choices: 1. use JavaBeans or Java method calls to build up the HTML in the response, or

Page 131 of 210

2. use RequestDispatcher.include() to bring in content from many little servlets from inside a master response-builder servlet. RequestDispatcher.include() is probably a safer method than RequestDispatcher.forward() for other reasons, since it leaves the request parameters alone (forward() changes the path etc. to be relative to the target servlet, not the original servlet). You may also look into Servlet 2.3 Filters as an alternative way to string page content together from multiple resources (though it too is quite complicated and ambiguous at times). 86) From a JSP page or servlet, how may I know the root context of the current web application ? I need to know this to specify the correct href even if the context may change when my app is deployed in the production environment. <a href="<%= request.getContextPath() %>/index.jsp"> 87) What is the difference between using getSession(true) and getSession(false) methods? The difference is as follows: When you say getSession(true), this method will check whether already a session is existing for the user. If a session is existing, it will return that session object, OTHERWISE WILL CREATE A SESSION OBJECT EXPLICITLY AND RETURN TO THE CLIENT. When you say getSession(false), this method will check whether a session is existing. If yes, then it returns the reference of that session object, OTHERWISE IT WILL RETURN 'null'. 88) What are the differences between JSP 1.1 and JSP 1.2? Released September 17th 2001, the JSP 1.2 specification is now ready for public consumption. It contains everything from brand new features to corrections and clarifications of areas that were not quite right in the previous version. The most important changes: * JSP 1.2 is based on Servlet 2.3 and Java 2. * The include action can now be used without flushing. * The XML syntax for a JSP page has been finalized.

Page 132 of 210

* Tag libraries can make use of Servlet 2.3 event listeners. * A new type of page validator has been added. * New options for tag library distribution and deployment have been added. * Two new tag interfaces have been added. * The conversion rules for String literal tag attribute values now include conversion to the Object type. * A PropertyEditor can be used for custom attribute value conversion. * The tag handler lifecycle has been clarified. * The Tag Library Descriptor has been aligned with other J2EE descriptors and extended with new elements. 89) How can I distinguish b/w 2 buttons which are submitting the same form from within my JSP page? I'd like to solve this problem without using JavaScript. You can give the buttons names: <form method="POST" action="..."> . . . <input type="submit" name="ok" value="ok" src="ok.gif" /> <input type="submit" name="cancel" value="cancel" src="cancel.gif" /> </form> Now, when the form submits, you can check to see if "ok".equals(request.getParameter("ok")). I think you can also give the buttons the same name, and just check the value to see which one was clicked. If you want to use images for your submit buttons, you'll have to check the ok.x and ok.y variables, since a submit for an image button doesn't return a value for ok, but the X and Y coordinates that you clicked when submitting. 90) How can I make a JSP page implement the SingleThreadedModel interface? You have to add isThreadSafe="false" to your page directive as following: <%@ page isThreadSafe="false" %> By default isThreadSafe is set to true, that means that there is no problem accessing to the JSP concurrently. Page 133 of 210

91) How can I find out the name of the machine on which the JSP is executing? You can use request.getServerName() for this purpose. 92) I am aware of the technical differences between response.sendRedirect() and <jsp:forward...> i.e. that the first one sends an instruction to the browser to request the specified page, and the second simply sends the specified page. Generally I use forward when I'm sending a page that is within the same site i am sending from, ie you are on index.jsp and sending them to the signup.jsp or whatever. I use sendRedirect() when I'm pushing them out to an outside link, ie you are you yoursite.com/index.jsp and are sending them to yahoo.com. 93) Is it possible to press a button in one frame and caused a form in another frame to be submitted? I have a scrollable jsp in one frame and another frame with just buttons. I want to be able to press a button and sumbit a form from the jsp page. Thanks for any replies. in frame 2 use function frame2() { parent.frames.frame1.document.form1.submit(); } <input type="button" name="but1" value="Click" onClick="frame2()"> 94) Is the HTTP Session maintained even when the network connection goes down? Can the same browser instance resume a previous session after reestablishing the network connection? In the Servlets API, HttpSessions are implemented as objects in memory on the web app server. Therefore, the session will be maintained on ther server as long as the server is running (or until it "times out" after the max inactive interval has passed). Even if the server "goes offline" and then "goes online," the session will be maintained if the web app server process is still running (and the session has not timed out). Session cookies are sent to the browser to allow the browser to identify itself to the server, thereby allowing the server to "look up" the user's session. The session cookies are deleted when the browser process exits,

Page 134 of 210

so if the user "goes offline" and then "goes online" and makes a request, the session cookie will still be available--assuming the same browser process. However, even if the cookie is available and sent to the server, if the session has timed out, the session is not available (the user would get a new session with a call to request.getSession()). Note that different browsers maintain session cookies across multiple browser windows in different ways. See 95) How can I optimize my JSP pages for better search engine placement? Google will spider and index JSP(read dynamic page). However, because their web crawler can easily overwhelm and crash sites serving dynamic content, they limit the amount of dynamic pages they index. And not all search engines will index the dynamic urls. The more parameter you have in your query string the less like you will get spidered. Make sure that your URLs are not too long and they do not contain special characters (?,&,@). Many search engines will ignore and URLs that contain ? and &. If you are generating content from a database, code so that the database produces static .html pages, perhaps every 24 hours or so. Don't rely on JavaScript for navigation. It helps to keep the parameters short and the number of them small. Also the change the way the URL is generated. Make sure that your keywords, metatags, title and alt tags are descriptive and accurate. Hope it follows right track Java Beans 1)What is a JavaBean? JavaBeans are reusable software components written in the Java programming language, designed to be manipulated visually by a software develpoment environment, like JBuilder or VisualAge for Java. They are similar to Microsoft's ActiveX components, but designed to be platformneutral, running anywhere there is a Java Virtual Machine (JVM). 2)What is a serialized bean? You can deliver a bean as either its bytecode (compiled Java code) or as a serialized object (after the bean instance is serialized to a file (*.ser)). The difference is that when you load the bean by its bytecode the bean loader normally create an instance from it by calling the default constructor (no arguments constructor). If you have a serialized instance the loader creates the instance like it was when it was serialized and therefore its internal state is recreated (except transient fields).

Page 135 of 210

Therefore you can provide already customized beans for a particular purpose instead of letting the bean user do this. So you can provide beans for the different Swing look and feels which vary in its background color, borders, fonts, etc. Then the bean user can select for the one he prefers instead of trying settings the bean properties. 3)What is a servlet bean? A servlet bean is a serializable servlet that follows the JavaBeans component architecture, basically offering getter/setter methods. As long as you subclass GenericServlet/HttpServlet, you are automatically Serializable. If your web server supports them, when you install the servlet in the web server, you can configure it through a property sheet-like interface. 4) Is a Java Bean a server side component or client side component? A JavaBean component can be used anywhere, either like an AWT component on the client or with a JSP page on the server. There is nothing that requires it to be one or the other. In fact, the same bean can be used for both. 5) How can I access EJBs from JavaBeans Components? In short, JavaBeans are not special; you access EJBs from JavaBeans the way you would from any other EJB client. However, JavaBeans can be useful as a 'wrapper' for EJBs that hide some of the complexities of EJBs and allow their use from other Java programs. A visual JavaBean, in particular, can be assembled in a GUI "bean builder" application, while an EJB often cannot. However, adapting an EJB to become a JavaBean can be very complicated and should not be undertaken lightly. 6) With regards to JavaBeans, what is a manifest file and how is it used? You can think of the manifest file as the Jar-file meta-data, describing the contents of the files inside the Jar. Each file in the .jar file can have an entry in the manifest file. This entry can include information stating that the entry is a JavaBean component and/or whether or not the entry has been signed. For JavaBeans, the manifest file will be read when you import the JAR into your Bean builder tool. The tool will search the manifest file for those

Page 136 of 210

entries that have been flagged as JavaBeans, and more likely then not, add them to the tools component palette. 7) How can I read the initialization parameters for a bean, i.e. similar to what happens in servlets when we user the ServletConfig class and then use it's getInitParameter() function? The initial version of the JavaBeans API included no direct support for this. You would have had to program it in yourself. The simplest way to do this was to use a (java.util.)Properties file and load() / store() key-value pairs in it. Use either the getResourceAsStream() or getSystemResourceAsStream() method of the ClassLoader to locate the file. 8) What is introspection in JavaBeans? Introspection is the ability to ask a JavaBean component what properties and events it supports. By default, introspection is supported by reflection, where you name methods with certain naming patterns, like set/getProperty() and add/removeListener(). You can also explicitly expose the bean's behavior through creation of a BeanInfo class related to the bean. The BeanInfo class can be used for many things, like setting up an icon for the component when used in a bean builder tool like JBuilder, limiting the properties available, or mapping methods to properties that don't follow standard naming patterns. 9) Is it possible to create static properties/methods of a bean class? Does the beans spec cover this and can builder tools handle a singleton bean, for example? There is nothing that stops you from creating static methods within a Bean class. However, they won't be treated as properties. Also not supported is creating beans from methods other than the constructor... though instances can be serialized to .ser files and instantiated without calling the default/no-arg constructor through Beans.instantiated(). 10) How should I model parameter passing in JSP and the relationship between JSP and JavaBeans using UML? Parameters

Page 137 of 210

There are two principal ways to model parameters being passed from a HTML source on the client to a <<server page>> on the server. The first is to put them in a tag value, called parameters. For example: +------------------+ +--------------------+ | <<client page>> | <<link>> 0..n | <<server page>> | | Catalog |----------------------------->| Product.jsp | +------------------+ {prameters="prodid"} +--------------------+ | <<build>> | | | V +--------------------+ | <<client page>> | | Product.html | +--------------------+ In the above example the link from Catalog to Product.jsp indicates that a standard anchor tag is used (i.e. <a>) and that appended to the url is the parameter prodid. At design time this parameter is not given any value, since it is likely to be runtime generated thing. Also note that in this catalog page there are potentially many links to product pages, all with potentially different prodid params. Multiple parameters can be passed simply be adding them in the string just as you would append them to the url. For example if the parameters tag value was "action=add&prodid&qty". It would indicate that at design time the parameter action was always set to add, and the values for prodid and qty are either not specified, or are specified at runtime. If the parameters being passed to the server are more complex, and where it might be useful to document heavily each and every one. Then you might want to model them as and association class on the <<link>> association. This lets you not only specific all the parameters, but gives you an oppertuity to specify datatypes, and default values for each. This of course is overkill for most simple parameter usages, but is handy for those special occasions. +------------------+ +--------------------+ | <<client page>> | <<link>> | <<server page>> | | HomeMonitor |----------------------------->| HomeControl.jsp | +------------------+ \ +--------------------+ \

Page 138 of 210

\ +-------------------+ | <<parameters>> | | ControlInfo | +-------------------+ | homeid : long | | deviceid : long | | action : enum | | value : string | +-------------------+ Beans Modeling bean usage in a JSP begins with a <<use bean>> stereotyped directional association from a <<server page>> class to the bean. +------------------+ | <<server page>> | | | Calendar.jsp |---------------------------------------->| DutyScheduleBean | +------------------+ {scope=session} +--------------------+ The role name corresponds to the jsp:usebean id attribute, the role specifier Schedule corresponds to the type attribute, and the tag value for scope is the use bean scope attribute. The beanname attribute is another valid tag value that can be specified at design time. <jsp:usebean id="mySched" class="com.mycompany.myproj.mysubsys.DutyScheduleBean" type="com.mycompany.myproj.comiface.Schedule" scope="session"> 11) What is the easiest way to convert my java beans into xml? Use java.beans.XMLEncoder. XMLEncoder e = new XMLEncoder( new BufferedOutputStream( new FileOutputStream("Test.xml"))); e.writeObject(new JButton("Hello, world")); e.close(); RMI 1)Do you need an HTTP server to use RMI? +--------------------+ <<use bean>> mySched : Schedule |

Page 139 of 210

Technically, you don't need an HTTP server to use RMI. You can always place the stub classes for the remote objects, along with any user-defined classes, within the client's CLASSPATH. But such a deployment is highly inflexible, and feasible only for the more simple implementations. In most real-life RMI deployment scenarios, the client retrieves all the classes dynamically via the HTTP protocol, by interacting with an web server running on the same host as the remote server objects. 2)Can my remote object obtain notification when there are no live references to it? Yes, you can enable remote objects to get notified as soon as there are no valid references to it. Although the distributed garbage collection mechanism takes care of memory management issues, explicit notification can help the remote server release valuable resources like network and database connections immediately. Any remote object that implements java.rmi.server.Unreferenced interface can get immediate notification via the unreferenced() method as soon as the server does not have any valid references to it. The following code snippet demonstrates how: public class RemoteServerImpl extends UnicastRemoteObject implements MyRemoteInterface, Unreferenced { public RemoteServerImpl() { super(); ... //allocate resources } ... public void unreferenced() { //deallocate resources here } } 3)How does the Distributed Garbage Collection algorithm work? The RMI subsystem implements a reference counting-based distributed garbage collection (DGC) algorithm to provide automatic memory management facilities for remote server objects. Basically, DGC works by having the remote server keep track of all external client references to it at any given time. When a client obtains a

Page 140 of 210

remote reference, it is addded to the remote object's referenced set. The DGC then marks the remote object as dirty and increases its reference count by one. When a client drops a reference, the DGC decreases its reference count by one, and marks the object as clean. When the reference count reaches zero, the remote object is free of any live client references. It is then placed on the weak reference list and subject to periodic garbage collection. 4) By default, what port does the RMI registry listen to? The rmiregistry program uses port 1099 by default. You can have it listen to a different port by specifying a different port from the command line: rmiregistry 1234 5) How can I develop a chat system using RMI? Well, to tell you exactly how to do it would take up too much space, but to give you an idea, you would basically create a server which listens for connections on a port and accept these connections and get each clients names. Then you would develop a client program which connects to this server. When one "client" types a message and presses 'Send', the message is routed through the server and out to all "client's" connected. This can be done by Input/Output streams, or (the easier way) RMI. 6) If a class implements both the Serializable and Remote interfaces, is the stub serialized and sent to the client or is the object? If an object implements java.rmi.Remote, then it is treated as a remote object - that is, its stub is serialized and sent to the client. This is true whether or not the object also implements java.io.Serializable. If the object is not an instance of java.rmi.Remote, then RMI will attempt to serialize the object itself. This will succeed only if the object is serializable, i.e. implements java.io.Serializable or java.io.Externalizable. 7) What is the benefit of using RMI over IIOP? Remote Method Invocation (RMI) over Internet Inter-Orb Protocol (IIOP) delivers Common Object Request Broker Architecture (CORBA) compliant distributed computing capabilities to the JavaTM 2 platform and to the Java Development Kit (JDKTM) 1.1. RMI over IIOP was developed by Sun and IBM. The joint work by Sun and IBM to implement Object Management Group (OMG) standards demonstrates the spirit of collaboration that continually moves the Java platform forward.

Page 141 of 210

RMI over IIOP combines the best features of RMI with the best features of CORBA. Like RMI, RMI over IIOP speeds distributed application development by allowing developers to work completely in the Java programming language. When using RMI over IIOP to produce Java technology-based distributed applications, there is no separate Interface Definition Language (IDL) or mapping to learn. Like RMI, RMI over IIOP provides flexibility by allowing developers to pass any serializable Java object (Objects By Value) between application components. Like CORBA, RMI over IIOP is based on open standards defined with the participation of hundreds of vendors and users in the Object Management Group. Like CORBA, RMI over IIOP uses IIOP as its communication protocol. IIOP eases legacy application and platform integration by allowing application components written in C++, Smalltalk, and other CORBA supported languages to communicate with components running on the Java platform. 8) How can my servlet class which subclasses GenericServlet/HttpServlet provide an RMI service? Instead of letting your service subclass the java.rmi.server.UnicastRemoteObject class it is possible to make a call to the static method in the same class: exportObject(Remote). Thus you should let your class subclass GenericServlet/HttpServlet and implement a Remote interface. In the init(ServletContext) method your instance can export itself. A simple example follows (exception handling omitted) : public class MyServlet extends HttpServlet implements MyRemoteInterface { public void init(ServletContext ctx) { UnicastRemoteObject.exportObject(this); } // rest of code goes here... } 9) Can my remote client also serve as a remote object? Yes. Just make sure your remote client is implemented as an RMI service, implementing a Remote interface and beeing exported as a UnicastRemoteObject (either by subclassing UnicastRemoteObject or by using the static exportObject() method of that class).

Page 142 of 210

If this is done, a reference to the client can be sent to the server as a parameter of a server method, and the object will not be serialized as other parameters, but a remote reference is established. The server can now call methods of the clients remote interface via this reference! EJB 1) What's different in Enterprise JavaBeans 1.1? The most significant changes are listed below:

Entity bean support, both container- and bean-managed persistence, is required. Java RMI-IIOP argument and reference types must be supported, but any protocol can still be used including IIOP, JRMP, HTTP, or a proprietary protocol. In other words, the client API must support the Java RMI-IIOP programming model for portability, but the underlying protocol can be anything. The javax.ejb.depoyment package has been dropped in favor of a XML based deployment descriptor Declarative security authorization (access control) has changed to be more role driven. Also the runAs declarations have been eliminated. Declarative isolation levels are no longer available. Isolation levels are now managed explicitly through JDBC (BMP), the database or other vendor specific mechanisms. The bean-container contract as been enhanced to include a default JNDI context for accessing properties, resources, (JDBC, JMS, etc), and other beans. The basic EJB roles have been expanded and redefined to better separate responsibilities involved in the development, deployment, and hosting of enterprise beans. What is Enterprise JavaBeans?

2)

Enterprise JavaBeans (EJB) is Sun Microsystems' specification for a distributed object system similar to CORBA and Microsoft Transaction Server, but based on the Java platform. EJB specifies how developers should build components that can be accessed remotely and how EJB vendors should support those components. EJB components, called enterprise beans, automatically handle transactions, persistence, and authorization security, so that the developer can focus on the business logic.

Page 143 of 210

3) What is an enterprise bean? An enterprise bean is a server-side component -- defined in the Java technology -- which adheres to the Enterprise JavaBeans server-side component model. A server-side component is business object that can be accessed remotely. Many server-side component models exist: CORBA specifies CORBA objects; Microsoft Transaction Server (MTS) defines COM/DCOM; and EJB specifies enterprise beans. Enterprise beans can be developed to represent business concepts like Employee, Order, Travel Agent, etc. Enterprise beans can be assembled into applications that solve enterprise business problems. EJB has two basic types of enterprise beans: Session and Entity. Depending on the type of enterprise bean used, features like persistence, transactions, security, and multiple concurrent access can be managed automatically. 4) Are Enterprise JavaBeans and JavaBeans the same thing? Enterprise JavaBeans and JavaBeans are not the same thing; nor is one an extension of the other. They are both component models, based on Java, and created by Sun Microsystems, but their purpose and packages (base types and interfaces) are completely different. JavaBeans The original JavaBeans specification is based on the java.beans package which is a standard package in the JDK. Components built on the JavaBeans specification are intraprocess components that live in one address space and are typically used for Graphical User Interface (GUI) as visual widgets like buttons, tables, HTML viewers, etc. Enterprise JavaBeans The EJB specification is based on the javax.ejb package, which is a standard extension package. Components built on the EJB specification are interprocess components that live in multiple address spaces as distributed object. These components are used as transactional business objects that are accessed as remote objects. 5) How does passivation work in stateful session beans?

Page 144 of 210

Unlike entity beans and stateless session beans, stateful session bean are usually evicted from memory when they are passivated. This is not true of all vendors but this view serves as good model for understanding the concepts of passivation in session beans. When a stateful bean experiences a lull in use -- between client invocations and transactions -- the container may choose to passivate the stateful bean instance. To conserve resources the bean instance is evicted from memory (dereferenced and garbage collected). When the EJB object receives a new client request, a new stateful instance is instantiated and associate with the EJB object to handle the request. Stateful beans maintain a conversational state, which must be preserved before the bean instance is evicted from memory. To accomplish this, the container will write the conversational state of the bean instance to a secondary storage (usually disk). Only the non-transient serializable instance fields are preserved. When the bean is activated the new instance is populated with the preserved state. References to live resources like the EJBContext, DataSource, JNDI ENC, and other beans must also be maintained somehow -- usually in memory -- by the container. The javax.ejb.SessionBean interface provides two callback methods that notify the bean instance it is about to passivated or was just activated. The ejbPassivate( ) method notifies the bean instance that it is about have its conversational state written to disk and be evicted from memory. Within this method the bean developer can perform operations just prior to passivation like closing open resources. The ejbActivate( ) method is executed just after a new bean instance has been instantiated and populated with conversational state from disk. The bean developer can use the ejbActivate( ) method to perform operations just prior to servicing client request, like opening resources. 6) How does a client application create a transaction object? How you gain access to UserTransaction objects varies depending on the type of client. Enterprise JavaBeans provides two types of transaction management:

Container-managed transactions. As the name implies, the EJB container makes the decisions (based on the deployment descriptor's trans-attribute setting) regarding how to bundle operations into transactions and then works with the transaction manager, which manages the transaction processing.

Page 145 of 210

Bean-managed transactions. In this case, a session bean obtains the UserTransaction object via the EJBContext using the getUserTransaction() method.

JMS clients can bundle several messages in a transaction simply by using a transactional session--a UserTransaction object is not required. To create a transactional session, use either QueueConnection.createQueueSession() or TopicConnection.createTopicSession() with true as the first argument. (Some JMS implementations support JTA, so that it's also possible to obtain a UserTransaction object from the JMS server.) In other environments, for example, a web server that supports servlets and/or JavaServer Pages (JSP), a JMS server, and others, you obtain a UserTransaction object via JNDI. Of course, for a servlet to obtain a UserTransaction object, there must be a JTS-capable server to deliver the object. Typically, the server provides the JNDI look-up name either directly or via a system or server property. For example, with the WebLogic server, you would use a code segment similar to the following: ... Context c = new InitialContext(); UserTransaction ut = (UserTransaction) c.lookup("javax.jts.UserTransaction"); ut.begin(); // perform multiple operations... ut.commit() ... With J2EE implementations, you obtain the UserTransaction object with a code segment similar to the following: ... Context c = new InitialContext(); UserTransaction ut = (UserTransaction) c.lookup("java:comp/UserTransaction"); ut.begin(); // perform multiple operations... ut.commit() ... If the environment provides the UserTransaction object via a system property, you would use a code segment similar to the following:

Page 146 of 210

... String transName = System.getProperty("jta.UserTransaction"); Context c = new InitialContext(); UserTransaction ut = (UserTransaction) c.lookup(transName); ut.begin(); // perform multiple operations... ut.commit() ... JNDI remote look-up names and property names vary, of course, across servers/environment. 7) Do JTS implementations support nested transactions? A JTS transaction manager must support flat transactions; support of nested transactions is optional. If a client begins a transaction, and within that transaction begins another transaction, the latter operation will throw a NotSupportedException if the JTS implementation does not support nested transactions. Keep in mind that even if the JTS implementation supports nested transactions, this transaction manager-level support does not guarantee support for nested transactions in an application. For example, the EJB 1.1 specification does not support nested transactions. 8) Why would a client application use JTA transactions? One possible example would be a scenario in which a client needs to employ two (or more) session beans, where each session bean is deployed on a different EJB server and each bean performs operations against external resources (for example, a database) and/or is managing one or more entity beans. In this scenario, the client's logic could required an all-or-nothing guarantee for the operations performed by the session beans; hence, the session bean usage could be bundled together with a JTA UserTransaction object. In the previous scenario, however, the client application developer should address the question of whether or not it would be better to encapsulate these operations in yet another session bean, and allow the session bean to handle the transactions via the EJB container. In general, lightweight clients are easier to maintain than heavyweight clients. Also, EJB environments are ideally suited for transaction management.

Page 147 of 210

9) How does a session bean obtain a JTA UserTransaction object? If it's necessary to engage in explicit transaction management, a session bean can be designed for bean-managed transactions and obtain a UserTransaction object via the EJBContext using the getUserTransaction() method. (It may also use JNDI directly, but it's simpler to use this convenience method.) 10) Why would a session bean use bean-managed transactions? In some situations, it's necessary for a (stateful) session bean to selectively control which methods participate in transactions, and then take over the bundling of operations that form a logical unit of work. 11) How does an enterprise bean that uses container-managed transactions obtain a JTA UserTransaction object? It doesn't! By definition, container-managed transaction processing implies that the EJB container is responsible for transaction processing. The session bean has only limited control of transaction handling via the transaction attribute. 12) Is it possible for a stateless session bean to employ a JTA UserTransaction object? Yes, but with restrictions. By definition, a stateless session bean has no state; hence, each method invocation must be independent. (The bean can be "swapped out" between method invocations.) Thus, a stateless session bean can obtain a UserTransaction object via the EJBContext using the getUserTransaction() method, but it must start and finish each transaction within the scope of a method invocation. 13) How do you configure a session bean for bean-managed transactions? You must set transaction-type in the deployment descriptor. 14) How does an entity bean obtain a JTA UserTransaction object? It doesn't. Entity beans do not employ JTA transactions; that is, entity beans always employ declarative, container-managed transaction

Page 148 of 210

demarcation. Entity beans, by definition, are somewhat tightly coupled (via the EJB container and server) to a datastore; hence, the EJB container is in the best position to manage transaction processing. 15) Is it necessary for an entity bean to protect itself against concurrent access from multiple transactions? No. One of the motivations for using a distributed component architecture such as Enterprise JavaBeans is to free the business logic programmer from the burdens that arise in multiprogramming scenarios. 16) What are the constraints or drawbacks of container managed EJB's ? CMP in beans depends a lot on the EJB vendor implementation and utilities. With some implementations container-managed entity beans can only by mapped to one table, while other implemenations offer Multiple table mappings to a single bean. The bottom line,It depends on the container provider being used. 17) Is entity data persisted at the end of a transaction or at any time? Depends on what you mean by "persisted". Data that is part of a transaction like database rows are persisted depending on the success of the transaction. If the transaction manager determines that the transaction was successful or there were no problems during any of the steps invoved in it, the data is committed, or otherwise rolled back. The container, on the other hand, invokes certain state transition lifecycle methods to conserve resources. This involves passivation and activation of the bean or instance swapping. This happens independent of the transaction since the client never interacts directly with the bean instance but with the server's implementation of the EJBObject. 18) How do enterprise beans access native libraries? In short, they don't. The EJB 1.1 Specification, section 18.1.2 (Programming Restrictions) lists some things that enterprise beans cannot do. In particular:

The enterprise bean must not attempt to load a native library.

Page 149 of 210

This function is reserved for the EJB Container. Allowing the enterprise bean to load native code would create a security hole.

19) How do I implement a logging system in my beans? Using java.io is prohibited Using the java.io package from within a bean is prohibited. The EJB 1.1 Specification, section 18.1.2 (Programming Restrictions) states the following: An enterprise bean must not use the java.io package to attempt to access files and directories in the file system. The file system APIs are not well-suited for business components to access data. Business components should use a resource manager API, such as JDBC API, to store data. Alternative Solutions To perform logging operations you must you a resource connection supported by the EJB programming model. EJB servers may support several resource connection options, which can be used to log events as shown below:

JDBC (javax.sql.DataSource) : Write log events in to a relational database. URL (java.net.URL) : Write log events to a custom logging server or post them to a web server. JavaMail (javax.mail.Session) : E-mail log events to a special account JMS (javax.jms.QueueConnectionFactory | javax.jms.TopicConnectionFactory) : Send the log events as messages.

20) What is a container? Enterprise beans are software components that run in a special environment called an EJB container. The container hosts and manages an enterprise bean in the same manner that a Java WebServer hosts a

Page 150 of 210

Servlet or an HTML browser hosts a Java applet. An enterprise bean cannot function outside of an EJB container. The EJB container manages every aspect of an enterprise bean at run time including remote access to the bean, security, persistence, transactions, concurrency, and access to and pooling of resources. The container isolates the enterprise bean from direct access by client applications. When a client application invokes a remote method on an enterprise bean, the container first intercepts the invocation to ensure persistence, transactions, and security are applied properly to every operation a client performs on the bean. The container manages security, transactions, and persistence automatically for the bean, so the bean developer doesn't have to write this type of logic into the bean code itself. The enterprise bean can focus on encapsulating business rules, while the container takes care of everything else.

Containers will manage many beans simultaneously in the same fashion that a Java WebServer manages many Servlets. To reduce memory consumption and processing, containers pool resources and manage the lifecycles of all the beans very carefully. When a bean is not being used a container will place it in a pool to be reused by another client, or possibly evict it from memory and only bring it back when its needed. Because client applications don't have direct access to the beans -- the container lies between the client and bean -- the client application is completely unaware of the containers resource management activities. A bean that is not in use, for example, might be evicted from memory on the server, while its remote reference on the client remains intact. When the client invokes a method on the remote reference, the container simply reincarnates the bean to service the request. The client application is unaware of the entire process. An enterprise bean depends on the container for everything it needs. If an enterprise bean needs to access a JDBC connection or another enterprise bean, it does so through the container; if an enterprise bean needs to access the identity of its caller, obtain a reference to itself, or access properties it does so through the container. The enterprise bean interacts with its container through one of three mechanisms: callback methods, the EJBContext interface, or JNDI. Callback Methods: Every bean implements a subtype of the EnterpriseBean interface which defines several methods, called callback methods. Each callback method alerts the bean of a different event in its lifecycle and the container will invoke these methods to notify the bean when it's about to Page 151 of 210

pool the bean, persist its state to the database, end a transaction, remove the bean from memory, etc. The callback methods give the bean a chance to do some housework immediately before or after some event. Callback methods are discussed in more detail in other sections. EJBContext: Every bean obtains an EJBContext object, which is a reference directly to the container. The EJBContext interface provides methods for interacting with the container so that that bean can request information about its environment like the identity of its client, the status of a transaction, or to obtain remote references to itself. JNDI: Java Naming and Directory Interface is a Java extension API for accessing naming systems like LDAP, NetWare, file systems, etc. Every bean automatically has access to a special naming system called the Environment Naming Context (ENC). The ENC is managed by the container and accessed by beans using JNDI. The JNDI ENC allows a bean to access resources like JDBC connections, other enterprise beans, and properties specific to that bean. The EJB specification defines a bean-container contract, which includes the mechanisms (callbacks, EJBContext, JNDI ENC) described above as well as a strict set of rules that describe how enterprise beans and their containers will behave at runtime, how security access is checked, transactions are managed, persistence is applied, etc. The bean-container contract is designed to make enterprise beans portable between EJB containers so that enterprise beans can be developed once then run in any EJB container. Vendors like BEA, IBM, and Gemstone sell application servers that include EJB containers. Ideally, any enterprise bean that conforms to the specification should be able to run in any conformant EJB container. Portability is central to the value that EJB brings to the table. Portability ensures that a bean developed for one container can be migrated to another if another brand offers more performance, features, or savings. Portability also means that the bean developer's skills can be leveraged across several EJB container brands, providing organizations and developers with better opportunities. In addition to portability, the simplicity of the EJB programming model makes EJB valuable. Because the container takes care of managing complex tasks like security, transactions, persistence, concurrency and resource management the bean developer is free to focus attention on

Page 152 of 210

business rules and a very simple programming model. A simple programming model means that beans can be developed faster without requiring a Ph.D. in distributed objects, transactions and other enterprise systems. EJB brings transaction processing and distributed objects development into the mainstream. 21) What makes a Java class an enterprise bean? An enterprise bean is composed of many parts, not just a single class. Essentially, an enterprise bean is constructed with a bean class, remote interface, home interface and deployment descriptor. These constituents are discussed below. A bean class is the implementation class of the bean that defines its business, persistence, and passivation logic. The bean class implements either the javax.ejb.EntityBean or javax.ejb.SessionBean interface and runs inside the EJB container. Instances of the bean class service client request indirectly; instances of the bean class are not visible to the client. The remote interface defines the business methods that will be visible to the client's that use the enterprise bean. The remote interface extends the javax.ejb.EJBObject interface and is implemented by a remote (distributed object) reference. Client applications interact with the enterprise bean through its remote interface. The home interface defines the create, delete (remove), and query methods for an enterprise bean type. The home interface extends the javax.ejb.EJBHome interface and is implemented by a remote (distributed object) reference. The client application will use the home interface to create beans, find existing beans, and remove specific beans. The deployment descriptor is used to describe the enterprise bean's runtime behavior to the container. Among other things the deployment descriptor allows the transaction, persistence, and authorization security behavior of a bean to be defined using declarative attributes. This greatly simplifies the programming model when developing beans. An enterprise bean represents the sum of all these parts (remote, home, bean class, and deployment descriptor) as one component. An enterprise

Page 153 of 210

bean is not an enterprise bean if any one of these parts is missing. A change to anyone of these parts -- changing even one attribute in the deployment descriptor for example -- creates an entirely new enterprise bean. 22) While deploying CMP entity beans, which fields in the bean are containermanaged and how are they identified? Container-managed fields may be specified in the bean's deployment descriptor. An entity bean, for example, has an XML deployment descriptor containing elements similar to the following:<br/> <enterprise-beans> <entity> <description>This entity bean models an audio compact disc.</description> <ejb-name>MusicCDBean</ejb-name> <home>musicstore.MusicCDHome</home> <remote>musicstore.MusicCD</remote> <ejb-class>musicstore.MusicCDBean</ejb-class> <persistence-type>Container</persistence-type> <prim-key-class>musicstore.MusicCDPK</prim-key-class> <reentrant>False</reentrant> <cmp-field><field-name>upc</field-name></cmp-field> <cmp-field><field-name>title</field-name></cmp-field> <cmp-field><field-name>artist</field-name></cmp-field> <cmp-field><field-name>type</field-name></cmp-field> <cmp-field><field-name>price</field-name></cmp-field> </entity> </enterprise-beans> In the above deployment descriptor, the container-managed fields are specified to be upc, title, artist, type, and price. While the deployment descriptor provides information about the containermanaged fields for use during deployment, the details of how these fields are mapped into the database (or other persistent storage mechanism) are controlled by the container-specific deployment process itself. To learn more about the container-specific deployment process, you will need to consult your container vendor's documentation. 23) Does the EJB programming model support inheritance?

Page 154 of 210

Inheritance is supported in EJB in a limited fashion. Enterprise beans are made up of several parts including: a remote interface; a home interface, a bean class (implementation); and a deployment descriptor The remote interface, which extends javax.ejb.EJBObject can be a subtype or a super-type of remote interfaces of other beans. This is also true of the home interface, which extends javax.ejb.EJBHome. The bean class, which implements either javax.ejb.EntityBean or javax.ejb.SessionBean can also be a subtype or super-type of the bean class used by another enterprise bean. Deployment descriptors are XML files, so there is no Object-Oriented (OO) inheritance in the deployment descriptor. Because an enterprise bean is not one object -- its the composition of several parts -- traditional OO inheritance is not possible. The constituent Java parts (remote, home, bean class) of an enterprise bean may themselves subtype or serve as super-type, but the bean as a whole (the sum of its parts) doesn't support inheritance. 24) How should complex find operations be implemented? In bean-managed persistence (BMP) complex find operations are not difficult to implement, because you have complete control over how a find operation works through the ejbFind methods in the bean class. ejbFind methods in BMP entities can span multiple tables and even different data sources to locate the right entity beans. With container-managed persistence (CMP) its more difficult because you are dependent on the versatility of the EJB vendor. In other words, if the vendor does not support sophisticated find operations or syntax, its more difficult to declare complex find operations at deployment time. With CMP you have a couple options:

Convert the CMP bean to a BMP bean and hand code the ejbFind methods yourself. This is a classic scenario for using BMP over CMP; when the EJB vendor is not sophisticated enough to support a bean's data access needs. Use a session bean to obtain the data you need. When a search operation becomes to complex to implement in a single bean its a good indication that the search operation is not appropriate for a find method. Search operations that span the data encapsulated by several different entity beans should be placed in a session bean with the emphasis on

Page 155 of 210

returning only the data needed, not necessarily bean references. Data can be returned in tabular format instead of bean references. NOTE: A common design error is to implement search operations that filter results of multi-entity find requests implemented by other entity beans. This should be avoided. If you can not find the entity beans in one find request, then you should use a search method in a session bean. 25) Can I use Threads in a enterprise bean? No. The thread management is done by the container for you. As a bean developer you are not allowed to use threads. Section 18.1.2 of the EJB 1.1 specification states:

The enterprise bean must not attempt to manage threads. The enterprise bean must not attempt to start, stop, suspend, or resume a thread; or to change a threads priority or name. The enter-prise bean must not attempt to manage thread groups.

These functions are reserved for the EJB Container. Allowing the enterprise bean to manage threads would decrease the Containers ability to properly manage the runtime environment. 26) Why are beans not allowed to create their own threads? Enterprise beans exist inside a container at run time. The container is responsible for managing every aspect of the enterprise bean's life including: transactions, access control, persistence, resource pooling, etc. In order for the container to manage the runtime environment of a bean, it must have complete control over the threads that access and run within a bean. This means that beans can not start or manage their own threads. Containers deny enterprise beans the privilege to manage threads for three basic reasons: Resource management, security, and threadsensitive storage. Resource Management Containers manage every aspect of the runtime environment used by enterprise beans including transactions, access control, life cycle, resource connections, VM security, class loading, and threads. This allows

Page 156 of 210

the container to conserve as many resources as possible, which is important when there are hundreds of enterprise beans servicing thousands of clients. Without strict management of resources like memory and threads, EJB systems might consume to many resources (memory and cycles), which would result in a slow system, a prospect that is untenable in a high-transaction environment. Threads started and managed by enterprise beans would not be managed by the container, which would make it difficult to conserve resources. Security There is no way for a container system to know in advance that a bean's use of threads is benign. While intentions may be sincere it is possible -probably inevitable -- that developers would create malignant beans that spawn so many threads that the entire system slows down. One bean instance's misuse of threads or the commutative effect of many instances could cause a system slowdown. This is an insurgent denial of service, where the beans themselves sabotage a system's ability to respond to client requests. Security is a very good reason for denying bean's the privilege of starting and managing their own threads. Thread-Specific Storage Thread-Specific Storage (TSS) is an established and common technique employed by vendors to propagate and track client requests through the container system. It involves associating data with a thread. The data may be information about the client's identity, the transaction context, and other information, which can be accessed by any part of the container without having to pass the data explicitly. This is especially useful when enterprise beans invoke other enterprise beans or access resources, because it provides a convenient and transparent mechanism for transferring information about the who is making the request and under what circumstances. Each vendor will use the TSS technique differently according to the mechanics of their server. Threads started and managed by the enterprise bean explicitly would not have the proper TSS -- that would require intimate knowledge and access to the vendors container system. Without the right TSS the enterprise bean's threads can not operate within the container system properly. This is another reason why bean are not allowed to start and manage their own threads, it would short-circuit the vendor's use of TSS. 27) How does EJB support polymorphism? Because an EJB consists of multiple "parts", inheritance is achievable in a rather limited fashion (see FAQ answer on inheritance here). There have been noteworthy suggestions on using multiple inheritance of the remote interface to achieve polymorphism, but the problem of how to share

Page 157 of 210

method signatures across whole EJBs remains to be addressed. The following is one solution to achieving polymorphism with Session Beans. It has been tried and tested on WebLogic Apps Server 4.50 with no problems so far. We will use an example to show how it's done. Say, there are 2 session beans, Tiger and Lion, that share some method signatures but provide different implementations of the methods.

AnimalHome and Animal are the home and remote interfaces. The signatures of the polymorphic methods are in Animal. AnimalBean is the base implementation bean. TigerBean and LionBean extend from AnimalBean. They may override the methods of AnimalBean, implementing different behaviors. Deploy Tiger and Lion beans, specifying AnimalHome and Animal as their home and remote interfaces. Note that Tiger and Lion should have different JNDI lookup names.

28) What classes does a client application need to access EJB? It is worthwhile to note that the client never directly interacts with the bean object but interacts with distributed object stubs or proxies that provide a network connection to the EJB container system. The mechanhism is as follows. 1. The client uses the JNDI context to get a remote reference (stub) to the home object ( the EJBHome). 2. It uses the home to get a remote reference (stub) to the EJBs remote object (the EJBObject) 3. It then invokes business methods on this remote object. The client needs the remote interface, the home interface, the primary key( if it is an entity bean). In addition to these, the client would need the JNDI factory implementation, and the remote and home stubs. In some EJB servers the Factory and/or stubs can be dynamically loaded at run time. In other EJB servers they must be in the classpath of the client application.

Page 158 of 210

29) What is an EJB primary key? How is it implemented when the database doesn't have a primary key? A primary key is an object that uniquely identifies the entity bean. According to the specification, the primary key must be unique for each entity bean within a container. Hence the bean's primary key usually maps to the PK in the database (provided its persisted to a database). You may need to create a primary key in the database for the sake of referential integrity. This does not, however, mean you NEED a primary key in the database. As long as the bean's primary key (which maps to a column or set of columns) can uniquely identify the bean it should work. 30) What's an .ear file? An .ear file is an "Enterprise Archive" file. The file has the same format as a regular .jar file (which is the same as ZIP, incidentally). The .ear file contains everything necessary to deploy an enterprise application on an application server. It contains both the .war (Web Archive) file containing the web component of the application as well as the .jar file. In addition there are some deployment descriptor files in XML. 31) Can beans use stored procedures in a database? Stored procedures can be used by session beans that access the database using JDBC and bean-managed entity beans that use JDBC to manage their own persistence. JDBC provides a call interface for using stored procedures. An example is provided below: InitialContext cntx = new InitialContext( ); DataSource dataSource = (DataSource) cntx.lookup("java:comp/env/jdbc/mydatabase"); Connection con = dataSource.getConnection( ); CallableStatement storedProcedure = con.prepareCall("{? = call someprocedure [(?,?)]}"); 32) Is method overloading allowed in EJB? Yes you can overload methods.

Page 159 of 210

33) How can JMS be used from EJB 1.1? The same as any client would use JMS. At this point there is no integration, but it is planned for a future release of the EJB spec. 34) Can primary keys contain more than one field? Yes, a primary key can have as many fields as the developer feels is necessary, just make sure that each field you specify as the primary key, you also specify a matching field in the bean class. A primary key is simply one or more attributes which uniquely identify a specific element in a database. Also, remember to account for all fields in the equals() and hashCode() methods. 35) How does Container Managed Persistence work with automatically generated database ID fields? Should I map the ID field explicitly or leave it unspecified? In the Deployment Descriptor, map the normal fields appropriately, but don't specify the auto-id field as one of the container managed fields. 36) Let's assume I use a JavaBean as a go-between a JSP and an EJB, and have, say, 50 concurrent clients that need to access the EJB functionality. Will the JSP container actually instantiate 50 instances of the bean, or can it reuse a single instance to access the EJB? It depends on the scope you associate with the JavaBean. If you assign the bean with page (which is the default) scope or request scope, a new bean will be instantiated for each incoming request. If you assign the bean with session scope, you will still have 50 instances loaded in memory (assuming each incoming request is triggered by a distinct client), although some may have been instantiated from an earlier request from the same client. However, you may not want to use the session scope for a high-volume site as these beans will continue to reside in memory, long after the request has been serviced, consuming valuable resources until they are invalidated either explicitly or due to a session timeout. You can also assign the bean with application scope, in which case it is instantiated just once before being placed into the servlet context of the container. It can then be accessed at a later time, as long as the server is up and running. Although this may sound like an attractive proposition, do

Page 160 of 210

note that you will have to contend with significant multithreading issues. For instance, you'll have to ensure that the bean is accessed in a threadsafe manner from each of the JSP files. While you can do this using explicit synchronization from within the JSP file, do note that your application may take a significant performance hit because of this especially if you expect tens or hundreds of concurrent clients accessing your pages. So, in short, your best bet may be to assign the bean with request scope. 37) What happens when two users access an Entity Bean concurrently? Taken from Enterprise JavaBeans by Richard Monson-Haefel, "EJB, by default, prohibits concurrent access to bean instances. In other words, several clients can be connected to one EJB object, but only one client thread can access the bean instance at a time. If, for example, one of the clients invokes a method on the EJB object, no other client can access that bean instance until the method invocation is complete." So, to answer your question, two users will never access an Entity Bean concurrently. 38) What's the reason for having two interfaces -- EJBHome for creating, finding & removing and EJBObject for implementing business methods. Why not have an single interface which supports both areas of functionality? This design reflects the common "Factory" Design pattern. The EJBHome interface is the Factory that creates EJBObjects. EJBObject instances are the product of the factory. The reason for having two interfaces is because they are both responsible for different tasks. The EJBHome is responsible for creating and finding EJBObjects, whilst the EJBObject is responsible for the functionality of the EJB. 39) Which fields in beans should be public? All Container Managed Fields in an Entity Bean must be public. Ejb 1.1 spec section 9.4.1 - "The fields must be defined in the entity bean class as public, and must not be defined as transient." 40) How do you implement callbacks in EJB?

Page 161 of 210

If your client is an EJB, it can pass a reference to itself to the method of the bean that it is calling. The EJB can then call methods directly on that interface. If your client is a Java client, your client requires some sort of object that will "listen" for call-backs. This could be either a CORBA or RMI object. Again, you could pass references to these objects to the EJB, which could then invoke methods on the references. 41) When should I use bean-managed transactions instead of specifying transaction information in the deployment descriptor? The Sun J2EE EJB Guide says like this: Although beans with container-managed transactions require less coding, they have one limitation: When a method is executing, it can be associated with either a single transaction or no transaction at all. If this limitation will make coding your session bean difficult, you should consider using bean-managed transactions. The following pseudo-code illustrates the kind of fine-grained control you can obtain with bean-managed transactions. By checking various conditions, the pseudo-code decides whether to start and stop different transactions within the business method. begin transaction ... update table-a ... if (condition-x) commit transaction else if (condition-y) update table-b commit transaction else rollback transaction begin transaction update table-c commit transaction ... I think what it means is there are some limitations in j2ee transaction support. In a container managed situation, nested or multiple transactions

Page 162 of 210

are not allowed within a method. if a biz method needs those features you need to go for bean managed transactions. 42) How do I automatically generate primary keys? A common way to do it is to use a stateless session bean to retrieve the ID that you wish to use as the primary key. This stateless session bean can then execute an Oracle sequencer or procedure etc. to retrieve the ID value used as the primary key. 43) How is the passivation of Entity beans Managed? The passivation of Entity beans is managed by the container. To passivate an instance, the container first invokes the ejbStore() method for synchronizing the database with the bean instance, then the container invokes the ejbPassivate() method. It will then return the bean instance back to the pooled state. (Every bean has an instance pool.) There are two ways for transitioning an entity bean from the ready to the pooled state, by using the ejbPassivate() or ejbRemove() method. The container uses ejbPassivate() to disassociate the bean instance from the entity object identity, and uses ejbRemove() to remove the entity object. When the instance is put back into the pool, it is no longer associated with an entity object identity. The container can now assign the instance to any entity object within the same entity bean home. A bean instance in the pool can be removed by using unsetEntityContext(). 44) To complete a transaction, which Transaction Attributes or Isolation Level should be used for a stateless session bean? [For example, I have a method transfer which transfers funds from one account to another account.] Vague question. Is the Session bean doing the DB work? I'll assume no. Let's say AtmEJB is a Session bean with the transfer method. Let's say AccountEJB is an Entity bean. Step 1:

Page 163 of 210

When the client invokes the transfer method you want that to be the transaction; i.e. "the transfer transaction". therefore you need to set the tx attribute of transfer to something that will make the container start a tx at the beginning of transfer and terminate it at the end of transfer. RequiresNew might be a good choice but you need to look at all your use cases not just this one. Step 2: The AccountEJB methods invoked from the transfer method need to have a tx attribute that allows them to be part of an ongoing tx. That means that deposit and withdraw cannot be RequiresNew! (that would suspend the transfer tx and run in its own tx). Look at the spec for these: there are 3 that meets the criteria for deposit and withdraw in the transfer use case. Which one to use? What are the other use cases in which deposit and withdraw will be called? Find one that works for each one. 45) Explain the different Transaction Attributes and Isolation Levels with reference to a scenario. The Enterprise JavaBeans model supports six different transaction rules:

TX_BEAN_MANAGED. The TX_BEAN_MANAGED setting indicates that the enterprise bean manually manages its own transaction control. EJB supports manual transaction demarcation using the Java Transaction API. This is very tricky and should not be attempted without a really good reason. TX_NOT_SUPPORTED. The TX_NOT_SUPPORTED setting indicates that the enterprise bean cannot execute within the context of a transaction. If a client (i.e., whatever called the method-either a remote client or another enterprise bean) has a transaction when it calls the enterprise bean, the container suspends the transaction for the duration of the method call. TX_SUPPORTS. The TX_SUPPORTS setting indicates that the enterprise bean can run with or without a transaction context. If a client has a transaction when it calls the enterprise bean, the method will join the client's transaction context. If the client does not have a transaction, the method will run without a transaction. TX_REQUIRED. The TX_REQUIRED setting indicates that the enterprise bean must execute within the context of a transaction. If a client has a transaction when it calls the enterprise bean, the method will join the client's transaction context. If the client does not

Page 164 of 210

have a transaction, the container automatically starts a new transaction for the method. Attributes

TX_REQUIRES_NEW. The TX_REQUIRES_NEW setting indicates that the enterprise bean must execute within the context of a new transaction. The container always starts a new transaction for the method. If the client has a transaction when it calls the enterprise bean, the container suspends the client's transaction for the duration of the method call.

TX_MANDATORY. The TX_MANDATORY setting indicates that the enterprise bean must always execute within the context of the client's transaction. If the client does not have a transaction when it calls the enterprise bean, the container throws the TransactionRequired exception and the request fails. 46) What is the most efficient approach for integrating EJB with JSP? Should the EJBs be invoked directly from within JSP scriptlets? Should the access take place from within Java beans? Or is it best to use custom tags for this purpose? JSP scriptlet code should be minimal. Invoking EJB code directly on a JSP page results in many lines of code on your JSP page, including try...catch blocks to catch naming and finding exceptions. Using a standard JavaBean as an intermediary between the JSP page and EJB server cuts down on the amount of code needed to add to a JSP page, and promotes reuse. The JavaBean should be a simple wrapper around the EJB you are accessing. If you use a standard JavaBean you could also use the jsp:useBean tag to setup EJB parameters, such as the server URL and server security parameters. Custom tags are also an option. However, they require a lot more coding than a simple JavaBean wrapper. The point should be to rewrite as little code as possible while at the same time keeping the JSP scriptlet content as light as possible. 47) How do you get a JDBC database registered with a JNDI name so that it can be accessed from an EJB? The short answer is that it depends on which container you're using to some extent. The one thing that (should be) common in EJB 1.1

Page 165 of 210

containers is that the ejb-jar.xml file's entry for that bean needs to contain a 'resource-ref' stanza, like so: <resource-ref> <res-ref-name>jdbc/LocalDB2<res-ref-name> <res-type>javax.sql.DataSource<res-type> <res-auth>Container<res-auth> <resource-ref> The res-ref-name is the most interesting part. This is the JNDI name relative to the java:comp/env namespace. Hence, to get this connection you'd do (in your bean): Context context = new InitialContext(); DataSource source = context.lookup("java:comp/env/jdbc/LocalDB2"); which gives you a DataSource that you can call getConnection on. The other half of this is container specific and done at deployment time by a 'Deployer' or 'Assembler' (to use the rolenames specified by the EJB spec.) This can work very differently from one container to the next, but here are a couple of (abbreviated) examples. With Weblogic 5.1, you must define a connection pool in weblogic.properties, then edit the weblogic specific deployment descriptor (using the EJB Deployment tool) to associate the resource-ref specified in ejb-jar.xml with that connection pool. With Inprise Application Server 4.0, all of the parameters for the connection (JDBC driver, connection URL, etc.) are specified in the inprise specific deployment descriptor (also editable via their deployment tool). Other servers will have other ways of associating the resource-ref with a pre-defined connection pool. 48) How to manage fields that can have null values in a container-managed Entity bean? First of all, let's just set up a typical scenario: You are developing a product which allows a bank to sign up new customers online. You have done analysis and design and settled on having two tables: 'users' and 'account' (let's keep it simple). Each "user"

Page 166 of 210

will have a corresponding "account". The foreign key between the two will be the "account number". So, for the 'users' table, you have the following fields: firstName, lastName, userId, password, and acctNum. When this table is created in the database, it is empty. Now you must relate your EJB code to this table for persistence. For simplicity sake I will leave out the Session bean (which I would use to talk to my Entity bean), the Entity bean primary key class, and the home and remote interfaces. We have the UserBean: public class UserBean implements javax.ejb.EntityBean { public String firstName = null; public String lastName = null; public String userId = null; public String password = null; public long acctNum = -1; /** * Called by the container after the UserHome.create() is called */ public void ejbCreate(String userId, String password, long acctNum) { this.userId = userId; this.password = password; this.acctNum = acctNum; } ... ... public void setUserData(UserData data) throws RemoteExeption, UserDataException { this.firstName = data.getFirstName(); this.lastName = data.getLastName(); } ... ... } Now, assuming you have the User (remote interface class), UserHome (home interface class), UserPK (primary key class) already done, you need to create the bean's deployment descriptor. Inside the deployment descriptor, you must specify the database table, 'users', which this bean will map to. Also, you must specify which fields from your bean map to which fields in the 'users' database table. (This is how the container knows which fields to persist between your bean and the database table.) Now assuming all code compiles and you have an EJB server up and running

Page 167 of 210

and you have deployed your bean, all you need to do is write a client (I would use a client to access a session bean, say 'CustomerSession', which would talk to my entity bean) to create a new user and pass in the userId, password and acctNum values, which will create the new user in the database. Notice the fields in the UserBean will now be set, but the firstName and lastName fields will still be set to null. These fields will still be empty in the database and will not change until these fields are set in the bean, since it is persisted. Now, call the setUserData(UserData data) method for setting the firstName and lastName, and these fields will now be set in the database and no longer be null. The container will handle the persistence of any fields which are set to null, just as it will handle any fields which are set to some meaningful value. 49) How can I debug my EJB applications? This depends upon which EJB Container you are using. Borland's JBuilder 3.5, Foundation Edition allows you to debug any Java 2 application, including the Inprise Application Server, WebLogic Server and J2EE Reference implementation. You can download it free from www.borland.com/jbuilder. There are other IDE's out there including NetBeans/Forte www.sun.com/forte/ffj/ce/ that can also debug EJB. 50) How can an applet talk directly with EJB? An applet must use the same procedure as any other Java class: it must use JNDI to locate the EJB Home Interface, then use RMI to talk with the Home Interface as well as the EJB itself. This means that the J2EE and/or JNDI and/or RMI classes need to be present in the applet's Java Virtual Machine. The easiest way to assure this is to use the latest Java Plug-in. Netscape 6, aka Mozilla, ships with the Java Plug-in. Other browsers have various problems with RMI and JNDI classes that are beyond the scope of this answer. Note, however, that it is not recommended to use EJB directly from applets, in part due to compatibility issues. Instead, you can use Servlets inside the application server to provide an HTML front-end that is assured to work on a much larger base of clients.

Page 168 of 210

51) What is the best way of implementing a web application that uses JSP, servlet and EJB technologies all together following a Model View Controller (MVC) architecture? [See the Sun J2EE Blueprints for "an integrated set of documentation and examples that describe and illustrate 'best practices' for developing and deploying component-based enterprise applications using the J2EE platform" including some good architecture whitepapers and source code. -Alex] Hmm, 'Best Way' is a bit rough - there are several 'good' ways, and the usual set of trade-offs between them. (I'm a consultant - I have to start any answer with "It depends...", otherwise they revoke my whiteboard privileges) The main thing you need to keep in mind as you design this sort of a system is that you want the interface into the EJB's to be rather narrow: in any flow, the ideal is to call one EJB method (hopefully on a stateless session bean), and let it make calls to entities on your behalf, then hand back the data you need to display. How you display it depends: you can either embed beans on your JSPs and let the beans make that hopefully-one EJB call, or you can post to a servlet, let that make the call, then forward to the JSP for display. The second of these is more flexible and gives you more leverage to hide, change, and enforce your site's structure. The first, however, will be easier for developers new to this web thing to follow. Essentially, I'm saying that Entity beans are your model, your controller is Session beans (maybe with a bit of help from servlets or beans), and your JSPs, beans and servlets are your View. One thing to note here: this discussion strongly implies that your EJBs are capable of externalizing their state as some number of very simple 'value objects' (not EJBs themselves, just something we can pass back and forth). These value objects are probably tuned tightly to a workflow, and will be produced by that session bean. This way the traffic between the EJB (server) and the JSP/Servlet (client) is tuned to what the client needs, while the transaction load on the server is minimized. 52) When does the container call my bean's ejbCreate / ejbPostCreate / ejbStore / ejbPassivate / ejbActivate / ejbLoad / ejbPassivate method? And what should I do inside it?

Page 169 of 210

The lifecycle of an enterprise bean is the heart of the EJB system. Your bean is basically implemented as a set of callback methods. There are a lot of these methods, which can be confusing; however, the implementation of each one is actually quite straightforward. Most of the time you can get away with implementing only a few of them. Using Bean-Managed Persistence, each callback method ejbX means the obvious thing (usually "you must do X"). Using Container-Managed Persistence,

ejbCreate means "fill in your defaults" ejbPostCreate means "your primary key is now valid; keep initializing" ejbStore means "I'm about to store your data into the DB" ejbPassivate means "I just stored your data, and I'm about to passivate you" ejbActivate means "I just activated you, and I'm about to load in your data" ejbLoad means "I just loaded your data from the DB"

53) What's the difference between EJBHome, EJB Home, EJB Object, EJBObject and EJB (not to mention Home Interface and Remote Interface)? The EJB spec is all about really bad naming decisions. First, an Enterprise JavaBean is not a JavaBean (but you already knew that). The "Home Interface" is actually a Factory Object. It is responsible for locating or creating instances of the desired bean, and returning remote references. When you write the source code for the EJB Home Interface, you must extend the interface EJBHome, and provide method signatures for all the desired create() and find() methods. An object that implements the Home Interface is automatically generated by the EJB Server tools. The "EJB Object", or Remote Object, is actually a Wrapper. It sits somewhere inside the container, between the client and your code. It is responsible for performing all the setup and shutdown tasks (like opening transactions, or restoring data state) immediately before and after your enterprise bean is called.

Page 170 of 210

The "EJB Object" is generated by the EJB Server tools -- you don't have to write any part of it. However, you do have to write another interface, called the "Remote Interface" or the "EJBObject Interface," that extends interface EJBObject, and provides method signatures for all the business methods. The server automatically generates a Java class that implements the Remote Interface; it is this object that is registered with RMI, and a reference to it is returned by the Home Interface (which we now know is actually a Factory Object). The "EJB," or Enterprise Bean, ironically, is not the EJB Object (even though it is an EJB and it is an object). It doesn't even implement the EJBObject interface, nor does it implement the Remote Interface. Instead, it implements either the EntityBean interface or the SessionBean interface. It also must implement all the methods defined in the Remote Interface -but it doesn't actually implement the interface (in the Java sense). This is unfortunate, since we cannot rely on the Java compiler to make sure we've implemented all the right methods. It must also implement one ejbCreate() method for each create() method in the Home Interface (as well as ejbFind()/find()). 54) Is there a difference between container managed and bean managed persistence in terms of performance? [Short answer: with bean-managed persistence, you can optimize your queries and improve performance over the generalized containermanaged heuristics. But container-managed persistence is very convenient, and vendors will be working to improve its performance as time goes on. -Alex] There is of course a difference as many CMPs use O-R mapping using metadata, which is slower than hardcoded queries (except vendors like GemStone that use a OODB which is slow anyway!) As always, a lot depends on the database schema. Given that CMP is still evolving, complex relationships (e.g.inheritance) and distributed transactions are not even supported by most EJB server vendors, leave alone performance. Having said that however, it does not seem right to compare BMP and CMP on performance because the motivation of CMP is precisely to relieve bean providers from thinking about this! In (J2EE) theory, a good CMP implementation should perform well in a production environment; in practice, except for a couple of vendors who have traditionally been strong in persistent storage space (e.g. Persistence Software, GemStone) you will not find great CMP support at this very moment.

Page 171 of 210

BMP offers a tactical approach while CMP is more strategic. Which implies that if you can work-around some (perhaps severe) limitations for nearterm, there may be much to gain with CMP as the vendor offering matures. 55) Given that RMI-IIOP does not support distributed garbage collection (unlike RMI-JRMP), do I need to do something explicitly to GC beans, or is it magically handled by the EJB framework? It is the Containers' responsibility to handle distributed garbage collection. This is how EJB's were designed. 56) OK, so EJB doesn't support user-created threads. So how do I perform tasks asynchronously? If your EJB does not need to know about the results of the aynch calls, then you can use JMS to send an asynch. message to another part of the system. Another alternative is to place the multithreaded code inside a CORBA or RMI server and call this from your EJB. Always keep site of the big picture, RMI and CORBA are part of J2EE and can be used as part of a 'J2EE' solution. There are some things that these technologies can do that EJB at this present time cannot. 57) What is an EJB Context? EJBContext is an interface that is implemented by the container, and it is also a part of the bean-container contract. Entity beans use a subclass of EJB Context called EntityContext. Session beans use a subclass called SessionContext. These EJBContext objects provide the bean class with information about its container, the client using the bean and the bean itself. They also provide other functions. See the API docs and the spec for more details. 58) Can I deploy a new EJB without restarting my server? (I'm using Weblogic.) Sure. WebLogic Server4.5 includes "hot deploy" feature that allow you to deploy, redeploy or undeploy EJBs while the Server is running, from the

Page 172 of 210

Weblogic Console. Deployment of EJBs made through the console are however lost when you restart the WebLogic Server. 59) How to setup access control in an EJB such that different application clients have different rights to invoke different methods in one EJB? 1) Set up the different users/groups and the methods each can have access to in your deployment descriptor. Note: You don't have to specify different methods for each user, you could also just specify different users to your entire bean - for example if you only wanted another component of your application talking to your bean. 2) Inside your client code, whenever you make your connection to the EJB server (to look up the bean) you need to specify the user and password, in order to set the Identity of the client: ... Properties p = new Properties(); .. p.put(Context.SECURITY_PRINCIPAL, "user"); p.put(Context.SECURITY_CREDENTIALS, "password"); ... 3) Inside your bean, you can do "extra" security checks (if you used 'Role'-based security): (Assuming you have a 'manager' role defined in your deployment descriptor and a user assigned to this role) public int getAccountBalance(accountId) { if (ejbContext.isCallerInRole("manager")) return balance; } You could also enforce security to your EJB server. Using Weblogic, you could add the following to your weblogic.properties file: ... weblogic.password.user=password ... where "user" is the username you grant access for and "password" (after '=') is the password for this username. 60) How is persistence implemented in enterprise beans?

Page 173 of 210

Persistence in EJB is taken care of in two ways, depending on how you implement your beans: container managed persistence (CMP) or bean managed persistence (BMP). For CMP, the EJB container which your beans run under takes care of the persistence of the fields you have declared to be persisted with the database - this declaration is in the deployment descriptor. So, anytime you modify a field in a CMP bean, as soon as the method you have executed is finished, the new data is persisted to the database by the container. For BMP, the EJB bean developer is responsible for defining the persistence routines in the proper places in the bean, for instance, the ejbCreate(), ejbStore(), ejbRemove() methods would be developed by the bean developer to make calls to the database. The container is responsible, in BMP, to call the appropriate method on the bean. So, if the bean is being looked up, when the create() method is called on the Home interface, then the container is responsible for calling the ejbCreate() method in the bean, which should have functionality inside for going to the database and looking up the data. 61) Can the primary key in the entity bean be a Java primitive type such as int? The primary key can't be a primitive type--use the primitive wrapper classes, instead. For example, you can use java.lang.Integer as the primary key class, but not int (it has to be a class, not a primitive). 62) How do I map a Date/Time field to an Oracle database with CMP? [Question continues: (I have written a wrapper class with the help of java.util.GregorianCalendar but it doesn't store time in Oracle database, whereas it stores Date without any problem.)] Use the java.sql.Timestamp field to store your Date/Time in your entity bean, and then declare the corresponding field as 'Date' type in the Oracle database and it will work fine. You will have the "date" value and the "time" value preserved. 63) What is the difference between a Server, a Container, and a Connector? To keep things (very) simple:

Page 174 of 210

An EJB server is an application, usually a product such as BEA WebLogic, that provides (or should provide) for concurrent client connections and manages system resources such as threads, processes, memory, database connections, network connections, etc. An EJB container runs inside (or within) an EJB server, and provides deployed EJB beans with transaction and security management, etc. The EJB container insulates an EJB bean from the specifics of an underlying EJB server by providing a simple, standard API between the EJB bean and its container. (Note: The EJB 1.1 specification makes it clear that it does not architect the interface between the EJB container and EJB server, which it says it left up to the vendor on how to split the implementation of the required functionality between the two. Thus there is no clear distinction between server and container.) A Connector provides the ability for any Enterprise Information System (EIS) to plug into any EJB server which supports the Connector architecture. 64) What is "clustering" in EJB? Clustering refers to the ability of multiple load-balanced web servers to share session and entity data. It is a major feature of web application servers. Standardized support for clustering was one of the primary motivations behind the EJB spec. Clustering also applies to Servlet containers sharing HttpSession data (similar to EJB Session Beans). 65) What is "hot deployment" in WebLogic? "Hot Deployment" in weblogic is the act of deploying, re-depolying, and un-deploying EJBs while the server is still running (you don't have to shutdown the server to deploy an EJB). 66) Can I specify specific WHERE clauses for a find method in a CMP Entity Bean? The EJB query language is totally vendor specific in EJB1.1. It is being standardized in 1.2.

Page 175 of 210

Yes, you can specify the where clause for a find method. This is the example for EJB's deployed on weblogic: findBigAccounts(double balanceGreaterThan): "(> balance $balanceGreaterThan)" where balance maps to some field in the table. 67) When using a stateful session bean with an idle timeout set, how can the bean receive notification from the container that it is being removed due to timeout? [Question continues: ? (Through some tests, it looks like none of the standard EJB callback methods are called when a stateful session bean is removed due to idle-timeout.)] According to the spec, ejbRemove need not (or must not) be called in this case. ejbPassivate is simply the Wrong Thing to be called (the bean is transitioning to the 'does not exist' state, not the 'passive' state). The EJB 1.1. spec says in section 6.6.3 Missed ejbRemove Calls: The application using the session bean should provide some clean up mechanism to periodically clean up the unreleased resources. For example, if a shopping cart component is implemented as a session bean, and the session bean stores the shopping cart content in a database, the application should provide a program that runs periodically and removes abandoned shopping carts from the database. Probably not the answer you're looking for, especially if you allocate some other resource (a Message Queue, for example) that you need to release. Although, if you're using a resource, you really should be getting it when you need it (via JNDI) and returning it back to the pool right away. 68) I have created a remote reference to an EJB in FirstServlet. Can I put the reference in a servlet session and use that in SecondServlet? Yes. The EJB client (in this case your servlet) acquires a remote reference to an EJB from the Home Interface; that reference is serializable and can be passed from servlet to servlet.

Page 176 of 210

If it is a session bean, then the EJB server will consider your web client's servlet session to correspond to a single EJB session, which is usually (but not always) what you want. 69) What is the difference between a Component Transaction Monitor (CTM) and an Application Server? A Component Transaction Monitor (CTM) is an application server that uses a server-side component model. Since a CTM is a Transaction Processing monitor (TP), it is expected to provide services for managing transactions, security, and concurrency. In addition, CTMs also facilitate distributed object architectures and provide facilities for object persistence. In short, a CTM is a specific type of application server. 70) How can I call one EJB from inside of another EJB? Just do it! EJBs can be clients of other EJBs. It just works. Really. Use JNDI to locate the Home Interface of the other bean, then acquire an instance reference, and so forth. 71) When using Primary Keys, why do I have to implement the hashCode() and equals() method in my bean? Implementing the hashCode() and equals() functions ensure that the primary key object works properly when used with hash tables. Hash tables are the preferred way EJB servers use to store and quickly retrieve instantiated entity beans. If session #1 uses widget "A" (which is an entity bean) then the server needs to do some work to instantiate and initialize the object. If session #2 then requests the same widget "A", the EJB server will look in its hash table of existing entity beans of type widget to see if widget "A" has already been instantiated. 72) Can I deploy two beans in a single jar file? If so, how? Yes, multiple EJBs can be deployed in a single jar file. The deployment is somewhat different between EJB 1.0 and EJB 1.1.

Page 177 of 210

In EJB 1.1 and in the draft EJB 2.0 specification, instead of a manifest and serialized deployment descriptors there is a single shared XML deployment descriptor named META-INF/ejb-jar.xml. Within ejb-jar.xml there must be either a <session> or <entity> element for each bean in the jar file. For example, the following XML fragment is for a jar file that contains one entity and one session bean: <ejb-jar> <enterprise-beans> <session> <ejb-name>MySessionBean</ejb-name> ... other xml elements describing the bean's deployment properties ... </session> <entity> <ejb-name>MyEntityBean</ejb-name> ... other xml elements describing the bean's deployment properties ... </entity> </enterprise-beans> </ejb-jar> The EJB 2.0 draft specification for deployment descriptors differs from EJB 1.1 only in the addition of XML elements for describing additional bean properties. 73) Why use EJB when we can do the same thing with servlets? Actually, servlets/JSPs and EJB are complementary, not competing technologies: Servlets provide support for writing web based applications whereas EJBs provide support for writing transactional objects. In larger web systems that require scalability, servlet and JSP or XML/XSL technologies provide support for the front end (UI, client) code, where EJB provides support for the back end (database connection pooling, declaritive transactions, declaritive security, standardized parameterization...) The most significant difference between a web application using only servlets and one using servlets with EJBs is that the EJB model mandates a separation between display and business logic. This is generally considered a Good Thing in non-trivial applications because it allows for internal reuse, allows flexibility by providing a separation of concerns, gives a logical separation for work, and allows the business logic to be tested separately from the UI (among others). Some of the hings that servlets and JSPs can do that EJBs cannot are:

Page 178 of 210

Respond to http/https protocol requests. (With JSP) provide an easy way to format HTML output. Easily associate a web user with session information

Some of the things that EJBs enable you to do that servlets/JSPs do not are:

Declaritively manage transactions. In EJB, you merely specify whether a bean's methods require, disallow, or can be used in the context of a transaction. The EJB container will manage your transaction boundaries appropriately. In a purely servlet architecture, you'll have to write code to manage the transaction, which is difficult if a logical transaction must access multiple datasources. Declaritively manage security. The EJB model allows you to indicate a security role that the user must be assigned to in order to invoke a method on a bean. In Servlets/JSPs you must write code to do this. Note, however that the security model in EJB is sufficient for only 90% to 95% of application code - there are always security scenarios that require reference to values of an entity, etc.

74) What restrictions are imposed on an EJB? That is, what can't an EJB do? From the spec:

An enterprise Bean must not use read/write static fields. Using read-only static fields is allowed. Therefore, it is recommended that all static fields in the enterprise bean class be declared as final. An enterprise Bean must not use thread synchronization primitives to synchronize execution of multiple instances. An enterprise Bean must not use the AWT functionality to attempt to output information to a display, or to input information from a keyboard. An enterprise bean must not use the java.io package to attempt to access files and directories in the file system. An enterprise bean must not attempt to listen on a socket, accept connections on a socket, or use a socket for multicast. The enterprise bean must not attempt to query a class to obtain information about the declared members that are not otherwise accessible to the enterprise bean because of the security rules of the Java language. The enterprise bean must not attempt to use the Reflection API to access information that the security rules of the Java programming language make unavailable. The enterprise bean must not attempt to create a class loader; obtain the current class loader; set the context class loader; set

Page 179 of 210

security manager; create a new security manager; stop the JVM; or change the input, output, and error streams. The enterprise bean must not attempt to set the socket factory used by ServerSocket, Socket, or the stream handler factory used by URL. The enterprise bean must not attempt to manage threads. The enterprise bean must not attempt to start, stop, suspend, or resume a thread; or to change a thread's priority or name. The enterprise bean must not attempt to manage thread groups. The enterprise bean must not attempt to directly read or write a file descriptor. The enterprise bean must not attempt to obtain the security policy information for a particular code source. The enterprise bean must not attempt to load a native library. The enterprise bean must not attempt to gain access to packages and classes that the usual rules of the Java programming language make unavailable to the enterprise bean. The enterprise bean must not attempt to define a class in a package. The enterprise bean must not attempt to access or modify the security configuration objects (Policy, Security, Provider, Signer, and Identity). The enterprise bean must not attempt to use the subclass and object substitution features of the Java Serialization Protocol.

The enterprise bean must not attempt to pass this as an argument or method result. The enterprise bean must pass the result of SessionContext.getEJBObject() or EntityContext. getEJBObject() instead. 75) Why do we have a remove method in both EJBHome and EJBObject? With the EJBHome version of the remove, you are able to delete an entity bean without first instantiating it (you can provide a PrimaryKey object as a parameter to the remove method). The home version only works for entity beans. On the other hand, the Remote interface version works on an entity bean that you have already instantiated. In addition, the remote version also works on session beans (stateless and statefull) to inform the container of your loss of interest in this bean. 76) Why is it that business methods should not be declared final? I believe that the basic reason is that mandating non-final business methods allows container developers to implement their EJB container via inheritence. They can generate a class that extends your bean, with

Page 180 of 210

methods that perform transactional housekeeping, then call the inherited method (which is the one you wrote in your bean), then perform more housekeeping. That said, I know of no major container that does things this way (although some of the OODBMS vendors may) 77) Why is ejbFindByPrimaryKey mandatory? An Entity Bean represents persistent data that is stored outside of the EJB Container/Server. The ejbFindByPrimaryKey is a method used to locate and load an Entity Bean into the container, similar to a SELECT statement in SQL. By making this method mandatory, the client programmer can be assured that if they have the primary key of the Entity Bean, then they can retrieve the bean without having to create a new bean each time - which would mean creating duplications of persistent data and break the integrity of EJB. 78) How can I pass init parameters to enterprise beans? You can specify Environment Entries that are accesssible by your EJB's. Inside your ejb-jar.xml you define the environment entries. <env-entry> <env-entry-name>theParameter</env-entry-name> <env-entry-type>java.lang.String</env-entry-type> <env-entry-value>theValue</env-entry-value> </env-entry> You can access the variable inside your EJB using the Environment Naming Context (in EJB 1.1) Context ctx = new InitialContext(); String val = (String)ctx.lookup("java:comp/env/theParameter"); 79) Should I use CMP or BMP for an application with complex data manipulation & relations? Generally, you should use CMP unless you're forced to use BMP due to limitations of the mapping tools. Also, "complex" is relative; some relatively

Page 181 of 210

complex data models can be captured with mapping tools, but some cannot. 80) For session beans, we can use the SessionSynchronization interface. For entity beans, how do we have control over a transaction? The SessionSynchronization interface is used by the Session beans to Synchronize the Instance variables after a rollback or after a commit operation, because container does not have any other way to inform the bean of these operations. With Entity beans, this is not a problem as the Container automatically calls the ejbLoad method that refreshed the values from the database. 81) What happens when a client calls an entity bean's home interface create() method and an entity bean already exists with that primary key, created previously by another client ? Also what happens when a client calls an entity bean's home interface findByPrimaryKey() method and an entity bean does not already exist with that primary key ? If the primary key already exists DuplicateKeyException is thrown, i.e if your Create method is defined to throw a CreateException, CreateException is thrown. DuplicateKeyException is the sub class of CreateException. For findByPrimarykey ObjectNotFoundException is thrown, i.e if your findByPrimarykey method is defined to throw a FinderException, FinderException is thrown. ObjectNotFoundException is the sub class of FinderException. 82) What is the difference between session and entity beans? When should I use one or the other? An entity bean represents persistent global data from the database; a session bean represents transient user-specific data that will die when the user disconnects (ends his session). Generally, the session beans implement business methods (e.g. Bank.transferFunds) that call entity beans (e.g. Account.deposit, Account.withdraw).

Page 182 of 210

83) What is a value object? Why would I use one? What are some problems with them? A Value Object, aka a Bulk Accessor or Bulk Data Class, is a lightweight Java class, separate from your EJB class, that contains properties or instance variables corresponding to each of your EJB's properties. Value objects are recommended when data has to be returned from an EJB server to the EJB client, if none of the data has to be updated. ie. The value objects are used to transport read-only data. It is the equivalent of the client requesting XML from the server tier, except you get the tighter compile time binding and control, and you don't have to parse the returned XML. If, instead, an equivalent EJB reference with the same 'getter' methods is returned, then each time the client calls a getter method on the reference EJB, this results in a remote method call to the server tier. This is an uneccessary round trip, when the object could have held the data locally itself. So basically, value objects are recommended to enable your multi-tier application to be more performant. If you do need to update data, then you may need to use an EJB reference instead. However, this fine-grained querying/updating of data could become a severe performance bottleneck, if lots of it is performed. The traffic between different tiers needs to be minimised. Instead, EJBs should be used by clients for more coarse-granied method invocations. For example, the client could call a session bean on the server to get a complex data set (encapsulated in a value object), instead of just 1 row of data from 1 table. The server session bean may have used many entity beans or jdbc directly, behind the scenes on the server tier; however, this is hidden from the client. Once the client recieves the complex value object, it can do as many local method calls as it likes on it to get the data. Then a new (or the same) object could then be constructed with all the updated data. The client would then pass this object back to the server, to perform the update, by calling the appropriate method on the remote

Page 183 of 210

session bean, passing the new value object as the parameter. EJB/RMI is sometimes touted as a way to write a multi-tier application, as if it is a single tier application , without having to architect your design to cope with cross-tier communications. In reality, though, any design has to compromise to take account of these cross-tier performance issues. One problem with using Value Objects is that they are indeed passed by value, not by reference. If the data are updated on the server, a client may be accessing an out-of-date value stored in his local copy of the value object. Furthermore, if you use value objects to *store* data back on the server, you may inadvertently be reverting changes to fields that you did not set, but that a different client changed in the meantime. Another is that it is simply annoying to write one! It's like, I just wrote all these accessor methods on the *real* bean, and now I have to write them again on this fake one! Also, as you upgrade your bean code, you need to remember to update your value object code as well, leading to possible subtle migration bugs. 84) What is the default transaction attribute for an EJB? There is no default transaction attribute for an EJB. Section 11.5 of EJB v1.1 spec says that the deployer must specify a value for the transaction attribute for those methods having container managed transaction. 85) What's the main difference between throwing an javax.ejb.EJBException and throwing an java.rmi.RemoteException from within a EJB? When should each be thrown? The main difference is that throwing remote exception from within the bean is deprecated: your bean methods (including ejbLoad, ejbStore and their ilk) should throw EJBException. Other things to note from the spec are that the current transaction will be rolled back (it wouldn't be if you threw an application exception), and the client will see it as a RemoteException, even though you threw an EJBException. 86) Is it possible to stop the execution of a method before completion in a SessionBean?

Page 184 of 210

Stopping the execution of a method inside a Session Bean is not possible without writing code inside the Session Bean. This is because you are not allowed to access Threads inside an EJB, refer to section 18.1.2 of the EJB 1.1 specification. One possible solution (that requires coding) would be to set the transaction that the Session Bean is running within to be rolled back. To do this, use the setRollBackOnly() method of the javax.transaction.UserTransaction interface. This method would of course require that your Session Bean is using transactions. If the Session Bean is processing many long running requests then it could provide an optimization by checking the transaction status using the getRollBackOnly() call of the javax.ejb.SessionContext object.

87) In CMP how can I define a finder method equivalent to a 'SELECT * FROM TABLE'? [RC - Please give reference to the particular AppServer you are using] Weblogic 5.1.0 - Define the following Finder syntax in your weblogic-ejb-jar.xml deployment descriptor. <finder> <method-name>All</method-name> <method-params></method-params> <finder-query<(1 = 1)]]></finder-query> </finder> 88) Is it legal to have static initializer blocks in EJB? Although technically it is legal, static initializer blocks are used to execute some piece of code before executing any constructor or method while instantiating a class. Static initializer blocks are also typically used to initialize static fields - which may be illegal in EJB if they are read/write see section 18.1.2. In EJB this can be achieved by including the code in either the ejbCreate(), setSessionContext() or setEntityContext() methods. 89) What are the benefits of using a Stateless Session Bean over using a class purely consisting of static methods?

Page 185 of 210

Mostly container management of transactions and the ability to 'easily' call remote code. Really, the two solutions work at different scales: a Stateless Session Bean is useful when you can define a set of (fairly coarse grained) atomic transactions that are related by a common theme, where a bunch of static methods in a class are more useful for (rather fine grained) utility code. One common use of Stateless Session Beans is to implement a facade over a set of entity beans, in order to allow the client to be transactionignorant. In this pattern the session bean defines a set of transactions that it implements using entity beans. 90) What is the difference between an Application Server and a Web Server? A Web Server understands and supports only HTTP protocol whereas an Application Server supports HTTP,TCP/IP and many more protocols. Also many more features such as Caches,Clusters,Load Balancing are there in Application Servers which are not available in Web Servers. We can also Configure Application Servers to work as Web Server. In short, Applicaion Server is a super set of which Web Server is a sub set. 91) What is EJBDoclet? EJBDoclet is an open source JavaDoc doclet that generates a lot of the EJB related source files from custom JavaDoc comments tags embedded in the EJB source file. 92) What is EJB QL? EJB QL is a Query Language provided for navigation across a network of enterprise beans and dependent objects defined by means of container managed persistence. EJB QL is introduced in the EJB 2.0 specification. The EJB QL query language defines finder methods for entity beans with container managed persistence and are portable across containers and persistence managers. EJB QL is used for queries of two types of finder methods: 1. Finder methods that are defined in the home interface of an entity bean and which return entity objects. 2. Select methods, which are not exposed to the client, but which are used by the Bean Provider to select persistent values that are maintained by the Persistence Manager or to select entity objects that are related to the entity bean on which the query is defined.

Page 186 of 210

From the EJB 2.0 spec: The Enterprise JavaBeans query language, EJB QL, is used to define finder queries for entity beans with container managed persistence. EJB QL lets the Bean Provider specify finder methods in a portable way. It is a specification language that can be compiled to a target language, such as SQL, of a persistent store used by a persistence manager. This allows the responsibility for the execution of finder queries to be shifted to the native language facilities provided for the persistent store (e.g., RDBMS), instead of requiring finder queries to be executed directly on the persistent managers representation of the entity beans state. As a result, finder methods are both portable and optimizable. 93) What is the difference between a "Coarse Grained" Entity Bean and a "Fine Grained" Entity Bean? Here's my definition, such as it is. A 'fine grained' entity bean is pretty much directly mapped to one relational table, in third normal form. A 'coarse grained' entity bean is larger and more complex, either because its attributes include values or lists from other tables, or because it 'owns' one or more sets of dependent objects. Note that the coarse grained bean might be mapped to a single table or flat file, but that single table is going to be pretty ugly, with data copied from other tables, repeated field groups, columns that are dependent on non-key fields, etc. Fine grained entities are generally considered a liability in large systems because they will tend to increase the load on several of the EJB server's subsystems (there will be more objects exported through the distribution layer, more objects participating in transactions, more skeletons in memory, more EJB Objects in memory, etc.) The other side of the coin is that the 1.1 spec doesn't mandate CMP support for dependent objects (or even indicate how they should be supported), which makes it more difficult to do coarse grained objects with CMP. The EJB 2.0 specification improves this in a huge way. 94) What is the role of serialization in EJB? A big part of EJB is that it is a framework for underlying RMI: remote method invocation. You're invoking methods remotely from JVM space 'A' on objects which are in JVM space 'B' -- possibly running on another machine on the network. To make this happen, all arguments of each method call must have their current state plucked out of JVM 'A' memory, flattened into a byte stream

Page 187 of 210

which can be sent over a TCP/IP network connection, and then deserialized for reincarnation on the other end in JVM 'B' where the actual method call takes place. If the method has a return value, it is serialized up for streaming back to JVM A. Thus the requirement that all EJB methods arguments and return values must be serializable. The easiest way to do this is to make sure all your classes implement java.io.Serializable. 95) Why don't Session Beans have to be re-entrant? It's not that they don't have to be re-entrant: they cannot be reentrant. The spec says "The container must ensure that only one thread can be executing an instance at any time" (EJB 1.1 Spec. 6.11.6). This is partly to simplify development of the EJB: the bean developer needn't concern himself with concurrency issues. The other major factor is that Session beans are seen as extenstions of the client - multiple threads implies multiple clients, which does not fit with this view of an extension. Granted that stateless sessions are used more as facades over entities or service interfaces than as 'extensions of the client', the programming model (and the container's developer's task) are much simpler if we restrict session beans to one thread of execution at any one time. Also, because of the way that stateless session beans are pooled by the container, allowing two threads in one at once is not really needed. Of course, the 'Gotcha' here is that session beans can't be 'called back' to from another EJB even within the same transaction. The reason that Entity beans are allowed to be reentered (if their deployment descriptor says they're built that way) is that there are (arguably) more cases when an entity might need to be called back than there are for sessions. 96) In EJB 2.0, What is a cmr-field. How can I differentiate between a cmr-field and a cmp-field? CMR stands for Container Managed Relation Field. In EJB 2.0 Persistence of CMP bean is managed by a Persistence manager The developer has to write his bean implementation class as abstract and Persistence Manager generates a concrete class for the bean. I will try to give an Example:Bean Developers Class:public abstract EmployeeBean implements javax.ejb.EntityBean {

Page 188 of 210

public abstract void setFirstName(String firstName); public abstract String getFirstName(); public abstract void setAddress(Address addr); public abstract Address getAddres(); }//end of class where Address is another abstract class(dependant object) having streetno,zip and other details In Deployment Descriptor:<cmp-field><field-name>firstName</field-name></cmp-field> <cmr-field> <cmr-field-name>myaddress</cmr-field-name> <cmr-field-type>Address</cmr-field-type> </cmr-field> Thus when Persistence manager generates the concrete class for above abstract class.It creates a variable "firstName" of type String as CMP and "myaddress" which of type Address, which is a CMR or also called as dependant object. 97) What is a Message Driven Bean, What functions does a message driven bean have and how do they work in collaboration with JMS? Message driven beans are the latest addition to the family of component bean types defined by the EJB specification. The original bean types include session beans, which contain business logic and maintain a state associated with client sessions, and entity beans, which map objects to persistent data. Message driven beans will provide asynchrony to EJB based applications by acting as JMS message consumers. A message bean is associated with a JMS topic or queue and receives JMS messages sent by EJB clients or other beans. Unlike entity beans and session beans, message beans do not have home or remote interfaces. Instead, message driven beans are instantiated by the container as required. Like stateless session beans, message beans maintain no client-specific state, allowing the container to optimally manage a pool of message-bean instances.

Page 189 of 210

Clients send JMS messages to message beans in exactly the same manner as they would send messages to any other JMS destination. This similarity is a fundamental design goal of the JMS capabilities of the new specification. To receive JMS messages, message driven beans implement the javax.jms.MessageListener interface, which defines a single "onMessage()" method. When a message arrives, the container ensures that a message bean corresponding to the message topic/queue exists (instantiating it if necessary), and calls its onMessage method passing the client's message as the single argument. The message bean's implementation of this method contains the business logic required to process the message: public void onMessage(javax.jms.Message message) // code to handle message Note that session beans and entity beans are not allowed to function as message beans. 98) Can I re-use the same Primary key class for various Entity Beans? Yes, you sure can. 99) Can you control when passivation occurs? The developer, according to the specification, cannot directly control when passivation occurs. Although for Stateful Session Beans, the container cannot passivate an instance that is inside a transaction. So using transactions can be a a strategy to control passivation. The ejbPassivate() method is called during passivation, so the developer has control over what to do during this exercise and can implement the require optimized logic. Some EJB containers, such as BEA WebLogic, provide the ability to tune the container to minimize passivation calls. Taken from the WebLogic 6.0 DTD "The passivation-strategy can be either "default" or "transaction". With the default setting the container will attempt to keep a working set of beans in the cache. With the "transaction" setting, the container will passivate the

Page 190 of 210

bean after every transaction (or method call for a non-transactional invocation)." 100) Why can't a Stateless SEssion Bean implement the SessionSynchronization interface? it might also want to be notified of the transaction events. It's just because a Stateless Session Bean does not have state. The container does not guarantee (like for the Stateful SEssion Bean) that the bean that will be used on two method calls, will be the same. 101) Entity Beans with no primary keys Is it possible to create an Entity Bean(CMP) based on table that does not have a primary key. Yes, you can create CMP Entity Beans without primary keys. But you must be aware of the implications: 1. Duplicate records may be entered in the table 2. The findByPrimaryKey() method may return varying rows In essence, CMP was not designed to not have primary keys, although it can work. The development process is the same as when you create CMP which has primary keys. 102) In EJB 2.0 Entity Beans, What is the difference between the local home interface and the remote home interface? EJB 2.0 adds the notion of local beans, which are accessible only from within the JVM your beans are running in. The idea behind this is that many beans you might create are never meant to be accessed by remote clients. For example, you may program beans meant for your public interface like Order and Invoice, and you may have other helper beans which are never meant to be instantiated by remote clients, like Inventory and SalesTaxCalculator. Or you might have an entire system that takes advantage of EJB's transaction management, persistence, etc, but which has no remote (i.e., outside the current JVM) clients at all. With EJB 1.1, you had to implement remote client views for all these beans, even if you had no remote clients. This means that your home and remote interfaces had to extend javax.rmi.Remote, which puts several restrictions on them, including:

Page 191 of 210

Any objects passed as parameters must be serializable Parameters are passed by value, not by reference Network and serialization overhead related to RMI Client must handle RemoteException on all method calls Local beans also have limitations, the primary one being that you can only access them from within the same JVM, so they don't make much sense for distributed applications. Also, if you're converting your old remote interfaces to local ones, you have to be careful about the pass-byreference semantics, which may lead to unintended consequences. Note that you can implement both remote and local interfaces to your beans. But in most cases it makes more sense to define your application model first, based on access, distribution, and deployment needs, and then decide on local vs. remote based on the tradeoffs.

103) In EJB 2.0, What is an Entity Bean's local interfaces? How do I define them? In EJB 2.0, An Entity Bean can have a set of Local interfaces for use by clients within the same JVM (known as collocated clients). The local interfaces extend the following interfaces:

javax.ejb.EJBLocalObject - for the Object interface javax.ejb.EJBLocalHome - for the Home interface Arguments between these interfaces and clients calling them are passed by reference.

104) What is the difference between Public Final Draft and Public Final Draft 2 of EJB 2.0? Check out section E.12 of Public Final Draft 2 for a complete listing of the changes between versions. The major changes were the addition of Local interfaces and Local Home interfaces for both Entity and Session Beans. On the Container Managed Persistence (CMP) front, Dependant Objects (which were a source of controversy) were removed. 105) What is the J2EE ECperf?

Page 192 of 210

ECperf is used for benchmarking J2EE application servers. It consists of a Specification and a benchmarking kit which is designed specifically to test and measure performance and scalability of J2EE application servers. 106) How do EJB and Web Services relate together? Are Web Services a replacement for EJB? Web Services can be thought of as a wrapper that can be used to allow EJB's to invoke external services and also to allow external services and clients to invoke the EJB's. A major strength of Web Services is in the integration of the J2EE platform with the Microsoft .NET platform. Using Web Services allows, for example, Microsoft Visual Basic clients to access EJB's as clients. Some products such as IBM WebSphere and BEA WebLogic already support Web Services inside there Application Servers. 107) In EJB 2.0, What is an ejbSelect() method? A select method is similar to a finder method for Entity Beans, they both use EJBQL to define the semantics of the method. They differ in that an ejbSelect method(s) are not exposed to the client and the ejbSelect method(s) can return values that are defined as cmp-types or cmrtypes. 108) How can I update the primary key field in a CMP Entity Bean? You cannot change the primary key field of an Entity bean. Refer to page 130 of the EJB 2.0 specification, it states "Once the primary key for an entity bean has been set, the Bean Provider must not attempt to change it by use of set accessor methods on the primary key cmp-fields. The Bean provider should therefore not expose the set accessor methods for the primary key cmp-fields in the component interface of the entity bean." A work around to update a primary key field, would be to remove and then an re-create the bean. 109) Can stateful behave as stateless Is it possible to change a Stateful Session Bean to behave in a Stateless manner at deploy-time? What issues are involved? Stateful and Stateless Session Beans are for different purposes. Therefore, stateful session bean cannot act as a Stateless Session Bean

Page 193 of 210

since their lifecycles are different. You can create a Stateful Session Bean to not store any conversational state and therefore, at least in theory, you can make it stateless, but since the lifecycles of Stateless and Stateful Session Beans are different, you do not achieve anything by doing this. 110) What is the meaning of marshalling and unmarshalling? In few words, "marshalling" refers to the process of converting the data or the objects inbto a byte-stream, and "unmarshalling" is the reverse process of converting the byte-stream beack to their original data or object. The conversion is achieved through "serialization". The purpose of the "marshalling/unmarshalling" process is to transfer data between the RMI system. 111) Are we allowed to change the transaction isolation property in middle of a transaction? No. You cannot change the transaction isolation level in the middle of transaction. 112) What is the need of Remote and Home interface. Why cant it be in one? In a few words, I would say that the main reason is because there is a clear division of roles and responsabilities between the two interfaces. The home interface is your way to communicate with the container, that is who is responsable of creating, locating even removing one or more beans. The remote interface is your link to the bean, that will allow you to remotely access to all its methods and members. As you can see there are two distinct elements (the container and the beans) and you need two different interfaces for accessing to both of them. 113) Can I develop an Entity Bean without implementing the create() method in the home interface? I think you can.

Page 194 of 210

As far as I know, there is nothing, in the EJB specifications, that prevents you to create an Entity Bean without the create() method. In this situation, the only way to obtain an instance of the bean is using a finder method. Without the create() method, the only way to create new beans is manually accessing to the database and using, for example, SQL insert statements. 114) What is the difference between Context, InitialContext and Session Context? How they are used? javax.naming.Context is an interface that provides methods for binding a name to an object. It's much like the RMI Naming.bind() method. javax.naming.InitialContext is a Context and provides implementation for methods available in the Context interface. Where as SessionContext is an EJBContext object that is provided by the EJB container to a SessionBean in order for the SessionBean to access the information and/or services or the container. There is EntityContext too which is also and EJBContext object that'll be provided to an EntityBean for the purpose of the EntityBean accessing the container details. In general, the EJBContext (SessionContext and EntityContext), AppletContext and ServletContext help the corresponding Java objects in knowing about its 'context' [environment in which they run], and to access particular information and/or service. Whereas, the javax.naming.Context is for the purpose of 'NAMING' [by the way of referring to] an object. 115) What are all the steps that are required to port EJB 1.1 code to EJB 2.0 compatible? Ejb 1.1 code will run in the container compatible with Ejb 2.0 without any change. But, EJB 2.0 is a more robust and powerful specification with many new features so you may considering altering your code to take advantage of these new features. But as I said, you do not need to change anything to make EJB 1.1 code execute in an EJB 2.0 environment.

Page 195 of 210

116) About J2EE Application Server Scalibility Issue Does scalibility means supporting mulitiple concurrent users alone? Scalability means that the performance of the application does not deteriorate greatly as more users are connected to the system. A scalable system will perform to its expectations as more users are simultaneously using the system up to some threshold. 1. It is said any application developed using the J2EE framework would be highly scalable. Now does the specification say the limit of concurrent users, the J2EE complaint app. server should support? No. The specification is not specific on the number of concurrent users J2EE compliant app server should support. The more it will support, the more it will sell so it is in the interest of the company developing the app server to have this as high of a number as possible. But maximum number of concurrent users is not only as function of the capacity of the app server. It depends on many other things in the application. For one, database. You can have an app server that support 1 million concurrent users but if the database can handle only 100,000 connections to it, your threshold become your lowest common denominator, that is database in this case. If an application needs to support 2000 concurrent users, is it necessary to use EJB's to take advantage of the J2EE application server's capability or just using JSP's and Servlets alone could be scalable? That also depends on the application. Using JSPs/Servlets alone could do the trick since they are multithreaded and can handle many simultaneous users but of course there is a limit. What that limit is needs to be tested for a given deployment. Any web-enabled application needs to be capacity tested to ensure that it will properly function under high load. 2000 users is not that much so I think JSP/Servlet solution could handle that many users at once. But keep in mind that you are developing an application that is likely composed of JSP/Servlet, JavaBeans, and perhaps EJBs. Just by adding EJBs to the picture does not necessarily mean that your application is more scalable. If you think about it, lets take your example of 2000 users hitting an application at once under normal load. Lets also say that you get an increase to about 2,500 and clients start to complain that the application all of a sudden is slow and does not perform to their expectations. simply adding EJBs to this application will not solve your problem. This is because the threads of execution still go through the browser so your web tier still has 2,500 user load. So you may need to load balance the web-tier across several web servers or do something else. Thinking that you will increase the scalability by adding EJBs to the picture is flawed. overall, J2EE applications are highly scalable because they always offer an alternative that will make the application more scalable. e.g. your web-tier is a bottleneck, load balance across several web server. You application server is a bottleneck, you can cluster. if you keep in mind what makes an application scalable and distribute the work to the appropriate tier in the n-tier J2EE application you will have a scalable system. But you have to know the technology to make this happen.

Page 196 of 210

117) Why an onMessage call in Message-driven bean is always a seperate transaction? From the EJB 2.0 specification: "An onMessage call is always a separate transaction, because there is never a transaction in progress when the method is called." When a message arrives, it is passed to the Message Driven Bean through the onMessage() method, that is where the business logic goes. Since there is no guarantee when the method is called and when the message will be processed, is the container that is responsible of managing the environment, including transactions. 118) Why are ejbActivate() and ejbPassivate() included for stateless session bean even though they are never required as it is a nonconversational bean? To have a consistent interface, so that there is no different interface that you need to implement for Stateful Session Bean and Stateless Session Bean. Both Stateless and Stateful Session Bean implement javax.ejb.SessionBean and this would not be possible if stateless session bean is to remove ejbActivate and ejbPassivate from the interface. You could argue that the two (stateful and stateless) are so different that they should have their own interface but Sun did not think so. They made both session beans implement the same interface and provided deployment descriptor to denote which one is it that you are deploying. 119) Static variables in EJB should not be relied upon as they may break in clusters. Why? Static variables are only ok if they are final. If they are not final, they will break the cluster. What that means is that if you cluster your application server (spread it across several machines) each part of the cluster will run in its own JVM. If you declare a static variable that is not final, it can be changed. Suppose that you are tracking something with a static integer that you are increasing at some point and lets say that you start with a value of 100. Say a method on the EJB is invoked on cluster 1 (we will have two clusters - 1 and 2) that causes value of the static variable to be increased to 101. On the subsequent call to the same EJB from the same client, a cluster 2 may be invoked to handle the request. A value of the static variable in cluster 2 is still 100 because it was not increased yet and

Page 197 of 210

therefore your application ceases to be consistent. Therefore, static nonfinal variables are strongly discouraged in EJBs. 120) What is PortableRemoteObject.narrow() method and what is used for? When you execute a lookup to get the home interface of your bean, you normally use the lookup() method of the javax.naming.Context interface. This method will return you an Object that needs to be casted to the home interface you've asked for. Unfortunately, this cannot be done using the normal/explicit casting [MyHome myHome = (MyHome)returnedObject]. For EJB, the communication between the server and the client is based on RMI (both remote and local interfaces, in fact, do implements the java.rmi.Remote interface). The underlying protocol that it is used for the communication is IIOP (I think 1.2), that is part of CORBA standards. It is normally used to describe this communication system using the Java RMI over IIOP. IIOP has not been designed for Java, but for generic languages, and this means that there are some limitations. Some languages, in fact, do not have the concept of casting. Java RMI-IIOP provides a mechanism to narrow the the Object you have received from from your lookup, to the appropriate type. This is done through the javax.rmi.PortableRemoteObject class and, more specifically, using the narrow() method. Just a note: when you are using the new EJB 2.0 Local Client API, you should be able to do a direct/explicit cast from the looked up Object, to the interface you need. 121) The EJB specification says that we cannot use Bean Managed Transaction in Entity Beans. Why? The short, practical answer is... because it makes your entity beans useless as a reusable component. Also, transaction management is best left to the application server - that's what they're there for. It's all about atomic operations on your data. If an operation updates more than one entity then you want the whole thing to succeed or the whole thing to fail, nothing in between. If you put commits in the entity beans then it's very difficult to rollback if an error occurs at some point late in the operation.

Page 198 of 210

Think of an account transfer which takes money from the first account and then pays it into a second account. If the paying in part fails how do you put the money back in the first account? What about if that then fails too? The transaction should always "wrap" the entire operation. There are two obvious ways of achieving this in an EJB environment: 1. Use the javax.transaction package 2. Use a session bean to represent usecases and specify how transactions should be managed as part of the session bean's deployment descriptor. Solution 2 is the "correct" way to do it. Either way, you can simply leave all transaction code out of your entity beans. 122) Can I map more than one table in a CMP? Actually the answer is no, you cannot map more than one table to a single CMP Entity Bean. CMP has been, in fact, designed to map a single table. Said so, we can see that there could be some workaraounds. The easiest one is to create a VIEW on the database side and have your CMP Entity mapped to it. This is a perfect fit for a read-only solution and, since views are not database dependant, this is a portable solution. Personally, I think that considering the way database work, it should be possible to use not-read-only ejbs with views. The trick, probably, is to include all the fields from all the tables (including the pk of all tables) and create a compound PK object that maps to all the PKs of the tables. I haven't tested that but if anybody is interested in "wasting" some time, it would be nice... 123) What is the advantage of puttting an Entity Bean instance from the "Ready State" to "Pooled state"? The idea of the "Pooled State" is to allow a container to maintain a pool of entity beans that has been created, but has not been yet "synchronized" or assigned to an EJBObject. This mean that the instances do represent entity beans, but they can be used only for serving Home methods (create or findBy), since those methods do not relay on the specific values of the bean. All these instances are, in fact, exactly the same, so, they do not have meaningful state.

Page 199 of 210

124) Can a Session Bean be defined without ejbCreate() method? The ejbCreate() methods is part of the bean's lifecycle, so, the compiler will not return an error because there is no ejbCreate() method. However, the J2EE spec is explicit:

the home interface of a Stateless Session Bean must have a single create() method with no arguments, while the session bean class must contain exactly one ejbCreate() method, also without arguments. Stateful Session Beans can have arguments (more than one create method)

125) How to implement an entity bean which the PrimaryKey is an autonumeric field The EJB 2 Spec (10.8.3 - Special case: Unknown primary key class) says that in cases where the PrimaryKeys are generated automatically by the underlying database, the bean provider must declare the findByPrimaryKey method to return java.lang.Object and specify the Primary Key Class as java.lang.Object in the Deployment Descriptor. When defining the Primary Key for the Enterprise Bean, the Deployer using the Container Provider's tools will typically add additional container-managed fields to the concrete subclass of the entity bean class. In this case, the Container must generate the Primary Key value when the entity bean instance is created (and before ejbPostCreate is invoked on the instance.) 126) What is clustering? What are the different algorithms used for clustering? Clustering is grouping machines together to transparantly provide enterprise services. The client does not now the difference between approaching one server or approaching a cluster of servers. Clusters provide two benefits: scalability and high availability. 127) What is secondary storage area? In an Entity Bean the passivation process has to be considered as a simple notification that the instance is going to be dissociated from the

Page 200 of 210

object. Saving the bean state (synchronizing it with the database), on an entity bean, is something that is done through ejbStore(). With Stateful Session Bean the passivation process of a bean it does saves the state of the bean in a secondary storage. The reason is because a stateful session bean do maintain the state between calls. In order to do that, the container has to save that state somewere. It uses its own storage area, that could be memory or a cache or the disk, and it calls this "secondary storage area", since the database is considered to be the first storage area. 128) With EJB 1.1 specs, why is unsetSessionContext() not provided in Session Beans, like unsetEntityContext() in Entity Beans? ejbRemove() is called for session beans every time the container destroyes the bean. So you can use this method to do the stuff you typically would do in unsetEntityContext(). For entity beans ejbRemove() is only called if the user explicitly deletes the bean. I think that is the reason why the engineers at SUN invented the unsetEntityContext() for this kind of bean. 129) How is Stateful Session bean maintain their states with client? When a client refers to a Stateful Session object reference, all calls are directed to the same object on the EJB container. The container does not require client identity information or any cookie object to use the correct object. This means that for a client to ensure that calls are directed to the same object on the container, all it has to do is to use same reference for every call. For example the following holds for all stateful session beans: StatefulHome sfh = ...//get home interface for stateful bean Stateful bean1 = sfh.create(); Stateful bean2 = sfh.create(); if (bean1.isIdentical(bean1)){} //this is true! if (bean1.isIdentical(bean2)){} //this is false! //Note that the second test would evaluate to true for stateless beans

Page 201 of 210

Thus, if you're calling a Stateful Session Bean from a servlet, your servlet need to keep the reference to the remote object in the HttpSession object between client calls for you to be able to direct calls to the same object on the container. Likewise, if you're calling from an application, you only obtain the reference to the bean once and reuse the object throughout the application session. 130) Choosing among ejbSelect or find? The ejbSelectXXX() and findXXX are very similar methods, and the main difference is that the first one is not exposed through the client interface, that means that it cannot be called by a client directly, unless wrapped in a method. There is another interesting difference related to the transaction context under wich an ejbSelectXXX() or findXXX() method is executed. The ejbSelectXXX() methods are executed in the transaction context of the method that is actually using it, while the findXXX() execute according to their own attributes (as specified by the bean provider). Nikos Argiropoulos has also added two additional differences: The ejbSelectXXX() method can return a single or a collection of objects of any type e.g Strings when the finded returns only single or collection of component or local component interfaces. When calling the ejbSelectXXX method from the wrapping business method, you can pass to it arguments related with the particular instance of the EJB. In the findXXX this cannot be done. Deciding when to use one and when the other, is really up to the developer. The ejbSelectXXX() seems to be a little bit more powerful. Is important to remember that it cannot be used by the client. 131) Retrieving user name from inside each bean. How can I retrive from inside my Bean (Stateless Session and Entity CMP) the user name which I'm serving (the user name of user just logged in my web application)? I need to know user name because I have a "logger Class" in my enterprise application that automatically generates logs files for tracking transactions for each user that logs in. Inside an EJB you may retrieve the "Caller" name, that is the login id by invoking: sessionContext.getCallerIdentity().getName() where sessionContext is the instance of "SessionContext" (setSessionContext)

Page 202 of 210

passed to the Session Bean, or the instance of "EntityContext" (setEntityContext) passed to the Entity Bean. 132) Can a primitive data type be specified as a method parameter, in the deployment descriptor? There are no specific restriction for using Java primitive types in the <method-params> tag in the Deployment descriptor. The EJB 2.0 specifications, describe the <method-params> by saying: "[...] are the fully-qualified Java types of the methods input parameters [...]". In addition there are few examples where the types used are both classes (i.e. java.lang.String) or simple primitives: <method-params> <method-param>char</method-param> <method-param>int</method-param> [...] </method-params> 133) How can I use Connection Pool? Additional info: I am using Oracle 9ias server. I have given max-connections to 50 in data-sources.xml file. And the class i am using is "oracle.jdbc.pool.OracleConnectionCacheImpl". I have also tried with OracleConnectionPoolDataSource class in datasources.xml. But i feel that connection pool is not utilised, because in the middle of the retrieval, the server hangs as there will no be connections left for opening... In entity beans, I have created connections in setEntityContext and releasing them in unsetEntityContext... Do not get the connection in the setEntityContext. Get the connection only when you need it. If you get the connection in setEntityContext with the pool of 50 connections and you retrieve 50 different entity beans each bean will hang on to the connection and you will hang. So, get the connection when you need it and release the connection as soon as you have no need for it any longer. There is no reason to get the connection in setEntityContext. 134) What is the diffrence between ejbCreate() and ejbPostCreate() in EntityBean?

Page 203 of 210

ejbCreate() is called before the state of the bean is written to the persistence storage (database). After this method is completed, a new record (based on the persistence fields) is created and written. If the Entity EJB is BMP, then this method must contain the code for writing the new record to the persistence storage. If you are developing an EJB following 2.0 specs, you can have overloading methods in the form of ejbCreateXXX(). This will improve the development so you can have different behaviour for creating a bean, if the parameters differs. The only requirement is that for each ejbCreateXXX() you need to have corrisponding createXXX() methods in the home or local interface. ejbPostCreate() is called after the bean has been written to the database and the bean data has been assigned to an EJB object, so when the bean is available. In an CMP Entity EJB, this method is normally used to manage the beans' container-managed relationship fields. 135) What is the default time for transaction manager? And how to set maximum time(timeout) for transaction?. The default time depends on your app server. It is usually around 30 seconds. If you are using bean-managed transactions, you can set it like this: // One of the methods from the SessionBean interface public void setSessionContext(SessionContext context) throws EJBException { sessionContext = context; } // Then, when starting a new transaction UserTransaction userTransaction = sessionContext.getUserTransaction(); userTransaction.setTransactionTimeout(60); userTransaction.begin(); // do stuff userTransaction.commit(); If you are using container-managed transactions, this value is set in a app server specific way. Check your app server's deployment descriptor DTD. Transactions 1) What is a transaction?

Page 204 of 210

A transaction is an abstraction of an atomic and reliable execution sequence. Transaction processing is important for almost all modern computing environments that support concurrent processing. In a distributed computing environment, if, for example, multiple clients were to interact with the same database table concurrently, it's possible that interleaved database operations could leave the table in an inconsistent state. Transaction support is also important because systems can fail at any point in an execution sequence. If, for example, a database update operation involves several dependent tables, and the computer system fails when the database update is only partially completed, the database could be left in an inconsistent, even inoperable, state. File and database processing were essential operations with early multiprocessing computing systems; hence, transaction processing was necessary to guarantee their integrity. In today's complex distributed environments, transactions are fundamental to many distributed operations, for example, guaranteed delivery and ordering of a series of messages exchanged between two distributed application components. In this scenario, the message exchange should take place within an atomic execution sequence. During an atomic execution sequence a concurrency control algorithm manages interleaved operations to achieve the same effect as executing those operations in serial order. This algorithm includes, or calls on, a recovery algorithm that provides the logic necessary to undo and/or redo partially completed operations, depending on the execution context. Concurrency control and recovery algorithms are based in part on serializability theory. 2) What is a distributed transaction? A distributed transaction bundles multiple operations in which at least two network hosts are involved, for example, an enterprise bean deployed under an Enterprise JavaBean (EJB) server on network host jupiter that has a JDBC connection(s) to a database server on network host saturn. In enterprise computing, it's often the case that several network hosts are involved, each hosting different servers, for example, web servers, EJB servers, Java Message Service (JMS) servers, and other Java or CORBAbased application servers. In order to satisfy a client's dependence on an all-or-nothing guarantee for a sequence of operations, a transaction manager is responsible for

Page 205 of 210

creating and managing a global transaction that encompasses all operations against the implied resources. The transaction manager accesses each resource, for example, a relational database system, through the respective resource manager. 3) What is the acronym ACID? ACID represents the four properties of every transaction:

Atomicity - Either all of the operations bundled in the transaction are performed successfully or none of them are performed. Consistency - The transaction must leave any and all datastores that are affected by the transaction in a consistent state. Isolation - From the application's perspective, the current transaction is independent, in terms of application logic, from all other transactions running concurrently. Durability - The transaction's operations against a datastore must persist.

4) What parties are involved in transaction processing? There are five principals:

One or more client applications - optionally initiate client-based transactions One or more application servers - initiate transactions on behalf of clients The transaction manager - the intermediary between the clients and/or application server and the distributed transaction functionality One or more resource managers - for service access to external resources A communication resource manager - for propagation of transaction contexts

5) What is the Java Transaction API (JTA)? JTA is a service-oriented API specification. Typically, we think of JTA as the service API used by application programmers to group operations into one or more logical transactions. JTA actually provides three types of services:

Transactional operations in client applications Transactional operations in application servers performed on behalf of clients

Page 206 of 210

Global transactional management in a Java transaction manager coordinating multiple transaction-capable resource managers such as database servers and messaging systems

The most noticeable and often-used functionality is javax.transaction.UserTransaction, which provides services for explicit client control of transactions. 6) What is the Java Transaction Service (JTS)? JTS is a specification for implementing a Java transaction manager. A transaction manager serves as an intermediary between an application and one or more transaction-capable resource managers such as database servers and messaging systems. The JTS specification encompasses the JTA API specification. 7) How does a Java applet obtain a transaction object? It shouldn't, no matter how clever the programmer! Applets, by definition, should be (very) thin clients. Transaction-related operations should be minimized even in end-user client applications. The main objective of enterprise computing is to factor distributed applications so that serverintensive operations are handled by server-side application components. 8)Can different threads manipulate the same transaction? If thread t1 executes UserTransaction.begin() and thread t2 executes UserTransaction.commit(), UserTransaction.rollback(), or any other UserTransaction service, the behavior depends on the (EJB, JMS, or whatever) server's transaction support as well as the transaction manager implementation. 8) Can a servlet maintain a JTA UserTransaction object across multiple servlet invocations? No. A JTA transaction must start and finish within a single invocation (of the service() method). Note that this question does not address servlets that maintain and manipulate JDBC connections, including a connection's transaction handling. 9) Why would a client application use JTA transactions? One possible example would be a scenario in which a client needs to employ two (or more) session beans, where each session bean is deployed on a different EJB server and each bean performs operations against external resources (for example, a database) and/or is managing

Page 207 of 210

one or more entity beans. In this scenario, the client's logic could required an all-or-nothing guarantee for the operations performed by the session beans; hence, the session bean usage could be bundled together with a JTA UserTransaction object. In the previous scenario, however, the client application developer should address the question of whether or not it would be better to encapsulate these operations in yet another session bean, and allow the session bean to handle the transactions via the EJB container. In general, lightweight clients are easier to maintain than heavyweight clients. Also, EJB environments are ideally suited for transaction management. 10) How does a session bean obtain a JTA UserTransaction object? If it's necessary to engage in explicit transaction management, a session bean can be designed for bean-managed transactions and obtain a UserTransaction object via the EJBContext using the getUserTransaction() method. (It may also use JNDI directly, but it's simpler to use this convenience method.) 11) How does a client use the javax.transaction package? Typically, a client that needs to perform multiple operations within a transactional unit simply obtains a UserTransaction object and uses its services. These services include:

begin() commit() getStatus() rollback() setRollbackOnly() setTransactionTimeout()

In addition, of course, the client must deal with exceptions such as NotSupportedException, RollbackException, and others, and potentially, the status codes defined in the Status interface. The following interfaces prescribe services that are used by application servers, for example, an EJB server, in communicating with and requesting services from a JTS transaction manager:

Synchronization Transaction TransactionManager

Page 208 of 210

In general, there is no reason for a client to use these three interfaces. When an application employs these services, it has, by definition, crossed the line from client to application server. Middleware (application servers) exist for a reason, primarily to serve as an intermediary between lightweight clients and dedicated servers, for example, a database server. If a client needs the services of a JTS transaction manager, and these services are not provided by an existing application server, the client probably needs to be factored into a thin client(s) plus an application server. That is, the distributed application needs to implement a custom application server that insulates distributed clients from low-level transactional details. 12) How does a client use the javax.jts package? Clients do not use this package. This package prescribes functionality that is implemented by JTS transaction managers. 13) How does a client use the javax.transaction.xa package? Clients do not use this package. This package prescribes functionality that is used by JTS transaction managers when managing global transactions involving one or more resources such as database servers, JMS servers, and others. 14)What is two-phase commit? A commit operation is, by definition, an all-or-nothing affair. If a series of operations bound as a transaction cannot be completed, the rollback must restore the system (or cooperating systems) to the pre-transaction state. In order to ensure that a transaction can be rolled back, a software system typically logs each operation, including the commit operation itself. A transaction/recovery manager uses the log records to undo (and possibly redo) a partially completed transaction. When a transaction involves multiple distributed resources, for example, a database server on each of two different network hosts, the commit process is somewhat complex because the transaction includes operations that span two distinct software systems, each with its own resource manager, log records, and so on. (In this case, the distributed resources are the database servers.) Two-phase commit is a transaction protocol designed for the complications that arise with distributed resource managers. With a twophase commit protocol, the distributed transaction manager employs a coordinator to manage the individual resource managers.

Page 209 of 210

The commit process proceeds as follows:

Phase 1 o Each participating resource manager coordinates local operations and forces all log records out: o If successful, respond "OK" o If unsuccessful, either allow a time-out or respond "OOPS" Phase 2 o If all participants respond "OK": Coordinator instructs participating resource managers to "COMMIT" Participants complete operation writing the log record for the commit o Otherwise: Coordinator instructs participating resource managers to "ROLLBACK" Participants complete their respective local undos

In order for the scheme to work reliably, both the coordinator and the participating resource managers independently must be able to guarantee proper completion, including any necessary restart/redo operations. The algorithms for guaranteeing success by handling failures at any stage are provided in advanced database texts. 15)How can I manage long duration transactions? By saying "how do I manage" it seems like you are doing bean-managed transaction using the javax.transaction.UserTransaction interface to explicitly demarcate the transaction boundaries. In EJB 1.1 you can do that with a session bean. (With the upcoming 2.0 specification, you can also do it with message beans!)

In the case of a stateful session bean, the EJB specification allows the transaction boundary to be maintained over multiple method calls i.e., the bean method is not required to commit a transaction at the end of a business method (unlike stateless session beans). You could therefore achieve the effect of a long transaction over the entire use-case that the session bean implements. It is possible for the bean to open and close database connections for each method instead of holding it over the entire use-case. See the code example in the EJB 2.0 (Draft) Specification Section 16.4.3 Enterprise Beans Using Bean Managed Transaction Demarcation.

Page 210 of 210